General

  • Target

    162364f0a7edb5cc5cb742419bc0114f3449330432f03c8f89b414d0c236bf5e

  • Size

    313KB

  • Sample

    241104-3enyfsypbs

  • MD5

    4656bee6079201bb6b4a347969ad7925

  • SHA1

    d1c662e8a3399321f7310f902b9e1c8c1ea37607

  • SHA256

    162364f0a7edb5cc5cb742419bc0114f3449330432f03c8f89b414d0c236bf5e

  • SHA512

    3c1d55b2ea01aae0ae7704784dda03b4f8221f8d49c5e668aa69808c3b3c92fba72280cecc31adec015b20e9d64ef9ced048ce35dfc0c0111bb1c0b33fa7a64b

  • SSDEEP

    6144:nmZQcMzBIQzJbJymU30IdTz2zkCKkcL3IZC+uIZrBQCj7aCE6c:mZm9zJbJygIdOzgkcrIk41sMc

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      162364f0a7edb5cc5cb742419bc0114f3449330432f03c8f89b414d0c236bf5e

    • Size

      313KB

    • MD5

      4656bee6079201bb6b4a347969ad7925

    • SHA1

      d1c662e8a3399321f7310f902b9e1c8c1ea37607

    • SHA256

      162364f0a7edb5cc5cb742419bc0114f3449330432f03c8f89b414d0c236bf5e

    • SHA512

      3c1d55b2ea01aae0ae7704784dda03b4f8221f8d49c5e668aa69808c3b3c92fba72280cecc31adec015b20e9d64ef9ced048ce35dfc0c0111bb1c0b33fa7a64b

    • SSDEEP

      6144:nmZQcMzBIQzJbJymU30IdTz2zkCKkcL3IZC+uIZrBQCj7aCE6c:mZm9zJbJygIdOzgkcrIk41sMc

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks