General

  • Target

    10c492fc9b428967eb0954f02e5f194caeada4e9ce373ae12f6c013ceb24b5a1

  • Size

    404KB

  • Sample

    241108-madnxssrgm

  • MD5

    33681ce1b68e67cb625e95fb76a260f7

  • SHA1

    cc7e815f3cc4d8d5b96343a94ddc5391ab3d3a7b

  • SHA256

    10c492fc9b428967eb0954f02e5f194caeada4e9ce373ae12f6c013ceb24b5a1

  • SHA512

    499dd29fbe5f09b847501bff586fb62f878060b0543388e85de6d16ff550bf5a264403236dd523efcb558cc25571c552d3f36133012922854c7558469f9449ab

  • SSDEEP

    6144:yd6ElIFlHkmguD/STappweD2tCYDRdjU1Z4LY6OIr48b3guHKfTl7KriCz:ElSlHkmguLSmp7ZYDrbgp8b3j2TVl

Malware Config

Extracted

Family

redline

C2

129.146.180.22:20275

Targets

    • Target

      10c492fc9b428967eb0954f02e5f194caeada4e9ce373ae12f6c013ceb24b5a1

    • Size

      404KB

    • MD5

      33681ce1b68e67cb625e95fb76a260f7

    • SHA1

      cc7e815f3cc4d8d5b96343a94ddc5391ab3d3a7b

    • SHA256

      10c492fc9b428967eb0954f02e5f194caeada4e9ce373ae12f6c013ceb24b5a1

    • SHA512

      499dd29fbe5f09b847501bff586fb62f878060b0543388e85de6d16ff550bf5a264403236dd523efcb558cc25571c552d3f36133012922854c7558469f9449ab

    • SSDEEP

      6144:yd6ElIFlHkmguD/STappweD2tCYDRdjU1Z4LY6OIr48b3guHKfTl7KriCz:ElSlHkmguLSmp7ZYDrbgp8b3j2TVl

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks