General

  • Target

    4f7359c44d359871264bac0e98850147439699acdf6124f6c6d2e5371a498d89

  • Size

    95KB

  • Sample

    241108-n1hk8strbl

  • MD5

    d4255d9b417edb1eb387dcfdab699d6c

  • SHA1

    279f9a80494977ee3e162916a2bf06adfe12b33d

  • SHA256

    4f7359c44d359871264bac0e98850147439699acdf6124f6c6d2e5371a498d89

  • SHA512

    dabeb55083dee9819a70813babcbaa30de877cbea13e99c37c5f8053e38f9aa0566ca7d45573c722454ba442407529b0119cfbd96d71965250e58a4dfe097f31

  • SSDEEP

    1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2T3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzd/Y

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

172.31.22.246:13432

Targets

    • Target

      4f7359c44d359871264bac0e98850147439699acdf6124f6c6d2e5371a498d89

    • Size

      95KB

    • MD5

      d4255d9b417edb1eb387dcfdab699d6c

    • SHA1

      279f9a80494977ee3e162916a2bf06adfe12b33d

    • SHA256

      4f7359c44d359871264bac0e98850147439699acdf6124f6c6d2e5371a498d89

    • SHA512

      dabeb55083dee9819a70813babcbaa30de877cbea13e99c37c5f8053e38f9aa0566ca7d45573c722454ba442407529b0119cfbd96d71965250e58a4dfe097f31

    • SSDEEP

      1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2T3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzd/Y

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks