General

  • Target

    d5059e0f71405c7a59f06d7c25d8eff7b4bb1d98412cf3c427a9b20d149f1afa

  • Size

    277KB

  • Sample

    241105-2je1nsspej

  • MD5

    9996035a18d06448ff47c60c484f9bd2

  • SHA1

    510a0bd5c759587250915db95377ae00fc64c9a5

  • SHA256

    d5059e0f71405c7a59f06d7c25d8eff7b4bb1d98412cf3c427a9b20d149f1afa

  • SHA512

    08e1c66f85c3c6716ed2e03f0c7f5a18eb8fd6aabe389939f995b77462a6ffd90bbdab7bb0b680eb1f098ec7caf881d6ede4a9eb84637a1f8fab1d15019e8ad3

  • SSDEEP

    6144:ZAL5iDj/pASBmChr7pu9JuUZQpM7+IlfdL:OFiDj/2SBhhr7pu9kUZwPq

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      d5059e0f71405c7a59f06d7c25d8eff7b4bb1d98412cf3c427a9b20d149f1afa

    • Size

      277KB

    • MD5

      9996035a18d06448ff47c60c484f9bd2

    • SHA1

      510a0bd5c759587250915db95377ae00fc64c9a5

    • SHA256

      d5059e0f71405c7a59f06d7c25d8eff7b4bb1d98412cf3c427a9b20d149f1afa

    • SHA512

      08e1c66f85c3c6716ed2e03f0c7f5a18eb8fd6aabe389939f995b77462a6ffd90bbdab7bb0b680eb1f098ec7caf881d6ede4a9eb84637a1f8fab1d15019e8ad3

    • SSDEEP

      6144:ZAL5iDj/pASBmChr7pu9JuUZQpM7+IlfdL:OFiDj/2SBhhr7pu9kUZwPq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks