General

  • Target

    5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

  • Size

    413KB

  • Sample

    241104-ssbj6ssand

  • MD5

    c66d2a0602e9a030b0ec3d1be8c02461

  • SHA1

    dd9673008b885113ae348ddd60d3e48a12621368

  • SHA256

    5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

  • SHA512

    3515127b2145d11ac5274aa375eb97a5321dee6cb60bb9c1cf9001a26db5df59897179f8bf94de755f3803b6dc23138e9a52fdf9462872a1d63a790ccfcb63cf

  • SSDEEP

    6144:24ZckFI9TcgSWFvvLIh86HDdKxHQjerFPjjlI1IHMsWz:1FIFYCvDFi5KZQyrdjlI1q

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

    • Size

      413KB

    • MD5

      c66d2a0602e9a030b0ec3d1be8c02461

    • SHA1

      dd9673008b885113ae348ddd60d3e48a12621368

    • SHA256

      5066774b0025f44c0e7e7ec9949949d9151bfbd96eb0e880d61cf6b050e49489

    • SHA512

      3515127b2145d11ac5274aa375eb97a5321dee6cb60bb9c1cf9001a26db5df59897179f8bf94de755f3803b6dc23138e9a52fdf9462872a1d63a790ccfcb63cf

    • SSDEEP

      6144:24ZckFI9TcgSWFvvLIh86HDdKxHQjerFPjjlI1IHMsWz:1FIFYCvDFi5KZQyrdjlI1q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks