General

  • Target

    49d7f47109dc2f8f8bf217383a4516e774d92e882eac944c4920235897294f32

  • Size

    409KB

  • Sample

    241105-abnt3azfmc

  • MD5

    06fd7c4e3629909afa6ae5b302cf6cd1

  • SHA1

    fd540258387bb5a74779ae747b667008bd660ce6

  • SHA256

    49d7f47109dc2f8f8bf217383a4516e774d92e882eac944c4920235897294f32

  • SHA512

    e38341086f4eb6f1228f50255c06c90c7689f60c1938c98da23e13a6cc14969bd059b6a03412d837c5c2c323522ff989831389a2e191e54b621c542a630c4d59

  • SSDEEP

    12288:KJN0gfYZnCWDAtkSuOkiUdadYv/ySXcB:ymgwZnCWoBUBv/L0

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      49d7f47109dc2f8f8bf217383a4516e774d92e882eac944c4920235897294f32

    • Size

      409KB

    • MD5

      06fd7c4e3629909afa6ae5b302cf6cd1

    • SHA1

      fd540258387bb5a74779ae747b667008bd660ce6

    • SHA256

      49d7f47109dc2f8f8bf217383a4516e774d92e882eac944c4920235897294f32

    • SHA512

      e38341086f4eb6f1228f50255c06c90c7689f60c1938c98da23e13a6cc14969bd059b6a03412d837c5c2c323522ff989831389a2e191e54b621c542a630c4d59

    • SSDEEP

      12288:KJN0gfYZnCWDAtkSuOkiUdadYv/ySXcB:ymgwZnCWoBUBv/L0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks