General

  • Target

    a4f3fa19305eed68099660cad169dcd08bbeb2edcfacbb88a4bcfc2525ebfbb5

  • Size

    308KB

  • Sample

    241107-jakwfsyapg

  • MD5

    a6243b629749a27a0106440d4edca9ba

  • SHA1

    946a2a5d7527f0946584e24b821f45d035444dbd

  • SHA256

    a4f3fa19305eed68099660cad169dcd08bbeb2edcfacbb88a4bcfc2525ebfbb5

  • SHA512

    4d3164185cb8fc554b176eb9407a2a3b9cf577b26c7f8905a4c9b6a9025ccab54a30e03da5e999083e2a843bc9bab5919aa26491b5b8e9043addb87078e81152

  • SSDEEP

    6144:ZXsYVRXeVw3mzGTBPx6kUDVXBrRg+IQwGjTwa/RxJg:ZXsY7yw3mzQBPxIDVRRdIQFY

Malware Config

Extracted

Family

redline

Botnet

Chasemafia1

C2

185.234.247.50:55567

Targets

    • Target

      a4f3fa19305eed68099660cad169dcd08bbeb2edcfacbb88a4bcfc2525ebfbb5

    • Size

      308KB

    • MD5

      a6243b629749a27a0106440d4edca9ba

    • SHA1

      946a2a5d7527f0946584e24b821f45d035444dbd

    • SHA256

      a4f3fa19305eed68099660cad169dcd08bbeb2edcfacbb88a4bcfc2525ebfbb5

    • SHA512

      4d3164185cb8fc554b176eb9407a2a3b9cf577b26c7f8905a4c9b6a9025ccab54a30e03da5e999083e2a843bc9bab5919aa26491b5b8e9043addb87078e81152

    • SSDEEP

      6144:ZXsYVRXeVw3mzGTBPx6kUDVXBrRg+IQwGjTwa/RxJg:ZXsY7yw3mzQBPxIDVRRdIQFY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks