General

  • Target

    download2-word-exe.zip

  • Size

    41KB

  • Sample

    241126-vs1keaxkaq

  • MD5

    c734b70ce564f87896ffbc39e00087ab

  • SHA1

    403c99f1bed85af47bb77456dcef7fd4cd0d20d7

  • SHA256

    ffd0597973e8343aa79f3a624105b7c4ae7cd6f24bb28447ef7f5bc6589036dc

  • SHA512

    5baa90d732f0e300fd21653d6f1901002bb68704b866f8cc70e08bea22b080b956f5e16cb4d21dbe59c999862c73c06c9b012f9d0e148591afe01a1d7e25d4de

  • SSDEEP

    768:oH3Eg69wSVZqH+7enNyfmgbGX0Zszw7nhbfVq06Wjc4zFUm3y2YeKjU6dzx:o76++7eeGss2fkuNzmm39R6d9

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

24.152.39.79:63387

Targets

    • Target

      download2-word-exe.zip

    • Size

      41KB

    • MD5

      c734b70ce564f87896ffbc39e00087ab

    • SHA1

      403c99f1bed85af47bb77456dcef7fd4cd0d20d7

    • SHA256

      ffd0597973e8343aa79f3a624105b7c4ae7cd6f24bb28447ef7f5bc6589036dc

    • SHA512

      5baa90d732f0e300fd21653d6f1901002bb68704b866f8cc70e08bea22b080b956f5e16cb4d21dbe59c999862c73c06c9b012f9d0e148591afe01a1d7e25d4de

    • SSDEEP

      768:oH3Eg69wSVZqH+7enNyfmgbGX0Zszw7nhbfVq06Wjc4zFUm3y2YeKjU6dzx:o76++7eeGss2fkuNzmm39R6d9

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks