General

  • Target

    8714c5dda968cc1749e93088c367ab3ed6e664c343f521767a13f485edd1eb84

  • Size

    409KB

  • Sample

    241104-savv4atren

  • MD5

    055a553fe9cce787862f003216cfd1e2

  • SHA1

    d6ac87b639cf074a09a9e3428c72d5caf0954d0c

  • SHA256

    8714c5dda968cc1749e93088c367ab3ed6e664c343f521767a13f485edd1eb84

  • SHA512

    2d721085f29eb3b908adc08141c0a292cdac8c99eb856e02d384b8ca0368fcd5dc3da969907dda8d3bbf25b2aa312e149c3c2f817d1d4242b4cc4580978977fa

  • SSDEEP

    12288:CIUcDgH38y8M9rEkTvQ2HYlrediUoDIBe:C2DCMy82X4lFUoDJ

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      8714c5dda968cc1749e93088c367ab3ed6e664c343f521767a13f485edd1eb84

    • Size

      409KB

    • MD5

      055a553fe9cce787862f003216cfd1e2

    • SHA1

      d6ac87b639cf074a09a9e3428c72d5caf0954d0c

    • SHA256

      8714c5dda968cc1749e93088c367ab3ed6e664c343f521767a13f485edd1eb84

    • SHA512

      2d721085f29eb3b908adc08141c0a292cdac8c99eb856e02d384b8ca0368fcd5dc3da969907dda8d3bbf25b2aa312e149c3c2f817d1d4242b4cc4580978977fa

    • SSDEEP

      12288:CIUcDgH38y8M9rEkTvQ2HYlrediUoDIBe:C2DCMy82X4lFUoDJ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks