General

  • Target

    a43f985d1bd1190b07461658ca234c0ab442eabcffa40e2e0d55982af991c82e

  • Size

    120KB

  • Sample

    241110-wgcjwasbrb

  • MD5

    d1d40e913614221a1a5e17a06e335119

  • SHA1

    793583a288b7bc2415446370141303fc8e25b712

  • SHA256

    a43f985d1bd1190b07461658ca234c0ab442eabcffa40e2e0d55982af991c82e

  • SHA512

    4d80b3f386956e5bdf73a01eee94fc570eae21ba915a3b2b79db03ceaf349ae9319f6016613852fb07a18a942831edfe46d1606e5f2054b12fdee59aa6efd4f9

  • SSDEEP

    1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2U3tmulgS6pY:r0gzWHY3+zi0ZbYe1g0ujyzd2Y

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

193.47.61.37:38369

Targets

    • Target

      a43f985d1bd1190b07461658ca234c0ab442eabcffa40e2e0d55982af991c82e

    • Size

      120KB

    • MD5

      d1d40e913614221a1a5e17a06e335119

    • SHA1

      793583a288b7bc2415446370141303fc8e25b712

    • SHA256

      a43f985d1bd1190b07461658ca234c0ab442eabcffa40e2e0d55982af991c82e

    • SHA512

      4d80b3f386956e5bdf73a01eee94fc570eae21ba915a3b2b79db03ceaf349ae9319f6016613852fb07a18a942831edfe46d1606e5f2054b12fdee59aa6efd4f9

    • SSDEEP

      1536:9qs+XqrzWBlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2U3tmulgS6pY:r0gzWHY3+zi0ZbYe1g0ujyzd2Y

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks