General

  • Target

    77befe6b740acfc9b9879819da444fd3e0dbc98ca273b77ede1c125a75cca039

  • Size

    337KB

  • Sample

    241111-hy4sssvfrr

  • MD5

    0cecf12766e06f8b08c388dd55a3deb9

  • SHA1

    b3a7ae4b268e7264509635e90e0a019659e362ee

  • SHA256

    77befe6b740acfc9b9879819da444fd3e0dbc98ca273b77ede1c125a75cca039

  • SHA512

    f12c63acfd876d23531015e79cf5c0368f548a8fabbc0075363ea4413efc47a87236c265bf95ca69ca6b34555ec2808b07fec1957a3fcbbaa2e168244c877e0e

  • SSDEEP

    6144:Q3nLFDJ8Lf/mwYhyuYGWJKTHBbNmcqLGsr07VTiLuIvkMd:c9J8Lf/EhyVGWJ8Bqr07VTiL5vV

Malware Config

Extracted

Family

redline

Botnet

test

C2

193.56.146.78:51487

Targets

    • Target

      77befe6b740acfc9b9879819da444fd3e0dbc98ca273b77ede1c125a75cca039

    • Size

      337KB

    • MD5

      0cecf12766e06f8b08c388dd55a3deb9

    • SHA1

      b3a7ae4b268e7264509635e90e0a019659e362ee

    • SHA256

      77befe6b740acfc9b9879819da444fd3e0dbc98ca273b77ede1c125a75cca039

    • SHA512

      f12c63acfd876d23531015e79cf5c0368f548a8fabbc0075363ea4413efc47a87236c265bf95ca69ca6b34555ec2808b07fec1957a3fcbbaa2e168244c877e0e

    • SSDEEP

      6144:Q3nLFDJ8Lf/mwYhyuYGWJKTHBbNmcqLGsr07VTiLuIvkMd:c9J8Lf/EhyVGWJ8Bqr07VTiL5vV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks