General

  • Target

    b236dcab6a13aa6f8736213491c8f62bf72f84a2ab02eef07dba678cba3e62ba

  • Size

    256KB

  • Sample

    241108-jb1nasybqb

  • MD5

    140d45012b05068e411af847d5ef4cdc

  • SHA1

    3b8049f68f1c95619152d08b56f8c061758528fa

  • SHA256

    b236dcab6a13aa6f8736213491c8f62bf72f84a2ab02eef07dba678cba3e62ba

  • SHA512

    f982bbfb94ef22737ed8200f218c96c170a7980d00c270fb253d3cb35f29b9d497e3a2bf5a641cef342008299f71c7f66ad6473522236b93f0de752d90b3b48c

  • SSDEEP

    6144:BzaFUOzWJi6kJq3knH/CxgaAQvQkoqaZKX:paFP1Jq3cNaAQvQko+

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      b236dcab6a13aa6f8736213491c8f62bf72f84a2ab02eef07dba678cba3e62ba

    • Size

      256KB

    • MD5

      140d45012b05068e411af847d5ef4cdc

    • SHA1

      3b8049f68f1c95619152d08b56f8c061758528fa

    • SHA256

      b236dcab6a13aa6f8736213491c8f62bf72f84a2ab02eef07dba678cba3e62ba

    • SHA512

      f982bbfb94ef22737ed8200f218c96c170a7980d00c270fb253d3cb35f29b9d497e3a2bf5a641cef342008299f71c7f66ad6473522236b93f0de752d90b3b48c

    • SSDEEP

      6144:BzaFUOzWJi6kJq3knH/CxgaAQvQkoqaZKX:paFP1Jq3cNaAQvQko+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks