General

  • Target

    abed99dfeaa237d3b69ad8634f70742a47263e670361935942f43eb73858974d

  • Size

    357KB

  • Sample

    241104-1vlrxs1jcp

  • MD5

    c481d22c8496f79de7cde6d6ed26d8e3

  • SHA1

    3e58ce389cb4e1938bb3c6861064f140c9bd0ffe

  • SHA256

    abed99dfeaa237d3b69ad8634f70742a47263e670361935942f43eb73858974d

  • SHA512

    fbbdcc04690dee20e6fb50b25d7167d43cefff649d45d65affd1eaa2fd412bfc34b69970530ed6d849e29c1fbd27a65147c2105797917c8d656227e1c1e2f357

  • SSDEEP

    6144:tTkCI3QFbA3xxsqd1ig6JrMDqSpb0vMoplnOSCJN:tTkCI3QFb4xh/6JYDN0E2lCJ

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      abed99dfeaa237d3b69ad8634f70742a47263e670361935942f43eb73858974d

    • Size

      357KB

    • MD5

      c481d22c8496f79de7cde6d6ed26d8e3

    • SHA1

      3e58ce389cb4e1938bb3c6861064f140c9bd0ffe

    • SHA256

      abed99dfeaa237d3b69ad8634f70742a47263e670361935942f43eb73858974d

    • SHA512

      fbbdcc04690dee20e6fb50b25d7167d43cefff649d45d65affd1eaa2fd412bfc34b69970530ed6d849e29c1fbd27a65147c2105797917c8d656227e1c1e2f357

    • SSDEEP

      6144:tTkCI3QFbA3xxsqd1ig6JrMDqSpb0vMoplnOSCJN:tTkCI3QFb4xh/6JYDN0E2lCJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks