General

  • Target

    fd71e9bc4c22377a24a49b7b91f8e686edacf387f8e99326bce10fef41779ff2

  • Size

    100KB

  • Sample

    241108-wp566awlax

  • MD5

    7131b7c5bdaad85e299f78e27d18135f

  • SHA1

    8300d1f0590b3d379e6d674c062f2a284e7f739f

  • SHA256

    fd71e9bc4c22377a24a49b7b91f8e686edacf387f8e99326bce10fef41779ff2

  • SHA512

    c0327bf92664db68134039f2597f167cdbfd98157aa5672b9568487b9cea190bbd648a4a0c0da221425bfff8dffc3dfb2cf9dabbe728ff485ad406db08dd585c

  • SSDEEP

    1536:Pg4TUKShTrV2dzaA2LBqwi8XVYvk/FJcBbNiMxyaZ6cG8WUZE6G6zerW:I4Qh3Vq/EyGqvk/FJ8VxyalWzqKW

Malware Config

Extracted

Family

redline

Botnet

MIXRyzki2k

C2

185.215.113.62:51929

Targets

    • Target

      fd71e9bc4c22377a24a49b7b91f8e686edacf387f8e99326bce10fef41779ff2

    • Size

      100KB

    • MD5

      7131b7c5bdaad85e299f78e27d18135f

    • SHA1

      8300d1f0590b3d379e6d674c062f2a284e7f739f

    • SHA256

      fd71e9bc4c22377a24a49b7b91f8e686edacf387f8e99326bce10fef41779ff2

    • SHA512

      c0327bf92664db68134039f2597f167cdbfd98157aa5672b9568487b9cea190bbd648a4a0c0da221425bfff8dffc3dfb2cf9dabbe728ff485ad406db08dd585c

    • SSDEEP

      1536:Pg4TUKShTrV2dzaA2LBqwi8XVYvk/FJcBbNiMxyaZ6cG8WUZE6G6zerW:I4Qh3Vq/EyGqvk/FJ8VxyalWzqKW

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks