General

  • Target

    eaa1e74310defce551226ec44d2874db95ec6a65

  • Size

    56KB

  • Sample

    241108-g1tvyaxemj

  • MD5

    7d0acd396ccdd1274dd584ed6c382dda

  • SHA1

    eaa1e74310defce551226ec44d2874db95ec6a65

  • SHA256

    d03b76eee17f976f97a11c3af2c5c3309bcaa3166b4a76b79cf2b38a8af72a40

  • SHA512

    cfdd56d067000562097bca58b53346567a4146841b30bce0e0e6be2af9f3c7dee9d4801c2082e1eba539e8d48c3e441a8bb85513f71ba04af2fef3dae6c7f4c3

  • SSDEEP

    1536:SXtuQuFz2sE6JnVKNhc+1sdTKNQIpc16BtkUIfsK:S9DIEyKNb1s6jc1ykeK

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

82.202.167.202:8303

Targets

    • Target

      KinalHack.bin

    • Size

      170KB

    • MD5

      8e74a4888033605bafb50eb0a5fda2c4

    • SHA1

      cf0adaabb1054ed0351b3dda0a7de85e9031f74d

    • SHA256

      975484614b4ee8e29207a901570673b8cd968ba3d37f801541bab5825a69dce2

    • SHA512

      3fb40c75ead8c21551d3212068cc895e018a2a79c4d803f744294d78fa7ffba945ab483e12a4fce94f1db76584279e80c00b7c8f051420ff42596c1f77e08832

    • SSDEEP

      3072:UYvzRYKciRWjUA57C0ujyzdTFIxh23g8r:UelY/8hyNFKE3xr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks