redline

General

Target
5e071990603cf2891738b38123fad48f5c947c67d008f8e6b86f2e6d887a8158.exe
Size 95KB
Sample240905-brwehs1flc
SHA256 5e071990603cf2891738b38123fad48f5c947c67d008f8e6b86f2e6d887a8158
MD5 d764ee44a2cd0baeab65b6260a1e3b0d
SHA1 7dab56928ebcb7fc452725103fe3b1725fd83026
SHA512 a5394313f0bd302514602cb0df0a4024d2135c70430094db9451ff53a355bc07c0a672b92b66bd0f24094f212f4500e77a73f9e5b90aedef013eac0b82de1f77
SSDEEP 1536:xqskjlqzWlbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed283teulgS6pk:fYUeYr+zi0ZbYe1g0ujyzdyk
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

13.48.78.154:4483

Targets

- Target
  5e071990603cf2891738b38123fad48f5c947c67d008f8e6b86f2e6d887a8158.exe
- Size 95KB
- SHA256 5e071990603cf2891738b38123fad48f5c947c67d008f8e6b86f2e6d887a8158
- MD5 d764ee44a2cd0baeab65b6260a1e3b0d
- SHA1 7dab56928ebcb7fc452725103fe3b1725fd83026
- SHA512 a5394313f0bd302514602cb0df0a4024d2135c70430094db9451ff53a355bc07c0a672b92b66bd0f24094f212f4500e77a73f9e5b90aedef013eac0b82de1f77
- SSDEEP 1536:xqskjlqzWlbG6jejoigIr43Ywzi0Zb78ivombfexv0ujXyyed283teulgS6pk:fYUeYr+zi0ZbYe1g0ujyzdyk
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

redline sectoprat cheat discovery infostealer rat trojan
- RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- RedLine payload
- SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- SectopRAT payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

RedLine payload

SectopRAT

SectopRAT payload

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2