General

  • Target

    63bb3658e289c8436ee0531e532988fa8644843a9e6d958492f2bb87f4f8cec8

  • Size

    308KB

  • Sample

    241110-nfjb2awamr

  • MD5

    0805723f77ff1bde1cee9f63e626fd47

  • SHA1

    eb609dfcf6a7dcd73b146c940cb8243613a486a1

  • SHA256

    63bb3658e289c8436ee0531e532988fa8644843a9e6d958492f2bb87f4f8cec8

  • SHA512

    092068aeaceaaebce45c5c6e7f4aaa60df3527e41ce86de623a969bcccee3e4328633f70ae5196f4ecf253cac75acbea40f56df6db9458e32cd5a50beccea830

  • SSDEEP

    6144:043EEEp58U+Z8sZbrNgm4j+v4rRgbyYjTwa/RxJg:04aF+Z8wbrNgm4rRVUY

Malware Config

Extracted

Family

redline

Botnet

Chasemafia1

C2

185.234.247.50:55567

Targets

    • Target

      63bb3658e289c8436ee0531e532988fa8644843a9e6d958492f2bb87f4f8cec8

    • Size

      308KB

    • MD5

      0805723f77ff1bde1cee9f63e626fd47

    • SHA1

      eb609dfcf6a7dcd73b146c940cb8243613a486a1

    • SHA256

      63bb3658e289c8436ee0531e532988fa8644843a9e6d958492f2bb87f4f8cec8

    • SHA512

      092068aeaceaaebce45c5c6e7f4aaa60df3527e41ce86de623a969bcccee3e4328633f70ae5196f4ecf253cac75acbea40f56df6db9458e32cd5a50beccea830

    • SSDEEP

      6144:043EEEp58U+Z8sZbrNgm4j+v4rRgbyYjTwa/RxJg:04aF+Z8wbrNgm4rRVUY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks