General

  • Target

    ad8cd5e3cfe29e30285f71f2b526b9e6.bin

  • Size

    43KB

  • Sample

    241205-b588jaxpck

  • MD5

    51094fd00285775a174d25568fac43ae

  • SHA1

    6a4e5d03954bdea37915563511d52bb98861527f

  • SHA256

    bba47bba6ba534e972fcef3b7358228ea29a17d61118a27cdf4f32965ea62007

  • SHA512

    53f3ca1c260fe77a477917d488adcef0806e49ea574d495efc96369813410e35dd20437ad7c3145ca9324872626a13bf044d84869239194f9b6464f1668d66fb

  • SSDEEP

    768:1c7bf+7WDD9tejv5iqrEAktHC91TW6V8LSYMzGCHNi6qYKK8McVvLJL:1aiWDONPrEAkI3WA8LjMzGi07BBXL

Malware Config

Extracted

Family

redline

Botnet

SSA

C2

45.61.159.66:55123

Targets

    • Target

      cb1142bbbc794fdb6d25ad25711ef58f2e945b7ad49ff170cf1bd4b317e94e18.exe

    • Size

      95KB

    • MD5

      ad8cd5e3cfe29e30285f71f2b526b9e6

    • SHA1

      d8d73dfb2df56f6800aaf08604561c69c580c597

    • SHA256

      cb1142bbbc794fdb6d25ad25711ef58f2e945b7ad49ff170cf1bd4b317e94e18

    • SHA512

      9a5d65d56cc5bcfb8f7b873c1a160af5170ad48101ea15d574a86ce7486a299128016dbe8707ea8c9af7d9ff25f8379771650f7de89da7d9e051a7c0009cf088

    • SSDEEP

      1536:SqsuoqcslbG6jejoigIj43Ywzi0Zb78ivombfexv0ujXyyed2ytmulgS6pI:wDfUYj+zi0ZbYe1g0ujyzdGI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks