General

  • Target

    c62b1586bc82f3da7152b5eaf94e716023828e7770b5bad9053054c1524d5a46

  • Size

    39KB

  • Sample

    241105-wfwlcsvhpf

  • MD5

    bb8403bfed2dbf462dfd66f3486fd74c

  • SHA1

    e643dcffa32d10e5f5041df6d2e02b7acfa3d04b

  • SHA256

    c62b1586bc82f3da7152b5eaf94e716023828e7770b5bad9053054c1524d5a46

  • SHA512

    5a8f55f3a623631bf42ab07e018b5be01fce7b508647037e5286d4ed16c7469a520ac8da381ec5a4417d524923b9845aa3561c8ee1a6e8584fa24b56530925ff

  • SSDEEP

    768:n9lB0SamuLvHPN3/73KRAUEXy4H61RAomeok4WiIX2q5V:fBrvu7t/U+y4HGHGWFX2U

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

142.132.167.105:32663

Targets

    • Target

      setup.exe

    • Size

      95KB

    • MD5

      96a56b2b5a14adb9ce18bb5ad0753d1c

    • SHA1

      00db63a52f8fef91cfd93492755a983cbcfbb21c

    • SHA256

      a6e206b61164e4e30aa92b125b0e36dabfb5c6c6af5b7bfcfbdfda08a68fcb18

    • SHA512

      9267fef09b62912fa9e194f4ba847560ec892202159b49dbfb9a56663ab7ebe95f316d3d24275f2a12c3d1366c9a9fce1718345652c8c1751a42b0d1e73b3411

    • SSDEEP

      1536:5qs8OqJGlbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2H3teulgS6p8l:XHuOYj+zi0ZbYe1g0ujyzdr8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks