General

  • Target

    46f87af3786f182d088e2a1bc5de6dae5a3d127f9260bfb9615cfb86ad034365

  • Size

    361KB

  • Sample

    241104-197ypsygnk

  • MD5

    23a1219083a40b7768e3a8f4e1d326b5

  • SHA1

    b478ef241d3c33ed1bb258a3e388e18bfa6c32e6

  • SHA256

    46f87af3786f182d088e2a1bc5de6dae5a3d127f9260bfb9615cfb86ad034365

  • SHA512

    0fe80487ac6778b6b5f82bf7b803e58974230462f4ab79ed84f00c3c923ad76faa33a0620a77227b816b8b8d9b3e4b814fb2f38192068bfefb938f809c61387b

  • SSDEEP

    3072:6JBq3HUCjJajQt32lmy9se7V8su0ay/MzTKx4ul5ZJnMxAcsebIa7md7tusAPpmn:6/qksajQIlmC97dFfCHsev7mdYso9

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      46f87af3786f182d088e2a1bc5de6dae5a3d127f9260bfb9615cfb86ad034365

    • Size

      361KB

    • MD5

      23a1219083a40b7768e3a8f4e1d326b5

    • SHA1

      b478ef241d3c33ed1bb258a3e388e18bfa6c32e6

    • SHA256

      46f87af3786f182d088e2a1bc5de6dae5a3d127f9260bfb9615cfb86ad034365

    • SHA512

      0fe80487ac6778b6b5f82bf7b803e58974230462f4ab79ed84f00c3c923ad76faa33a0620a77227b816b8b8d9b3e4b814fb2f38192068bfefb938f809c61387b

    • SSDEEP

      3072:6JBq3HUCjJajQt32lmy9se7V8su0ay/MzTKx4ul5ZJnMxAcsebIa7md7tusAPpmn:6/qksajQIlmC97dFfCHsev7mdYso9

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks