General

  • Target

    acf10f769b3d57c55b29ff4d18d4056b64cc87170010e3a42a1c95c6d5bbe80e

  • Size

    276KB

  • Sample

    241105-cbbkvasarc

  • MD5

    2771bccf31f158ce8d5fc81cbeeb8014

  • SHA1

    e4a5cf943cfa70751c10f48416c7705fa860556b

  • SHA256

    acf10f769b3d57c55b29ff4d18d4056b64cc87170010e3a42a1c95c6d5bbe80e

  • SHA512

    0d413f7201858f3bad1210f3480a7349b68ff5a33bf128743c229a62f3d52e76cde4c08fb9ff52cd6ab2116373491a1a5dbc5bf94c807d5834fe6f54de736e2e

  • SSDEEP

    6144:DL9LNkIt+toqltwfcpJHo4o0QQuNU3wqdL:95lt+toqqmCxVQu9q

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      acf10f769b3d57c55b29ff4d18d4056b64cc87170010e3a42a1c95c6d5bbe80e

    • Size

      276KB

    • MD5

      2771bccf31f158ce8d5fc81cbeeb8014

    • SHA1

      e4a5cf943cfa70751c10f48416c7705fa860556b

    • SHA256

      acf10f769b3d57c55b29ff4d18d4056b64cc87170010e3a42a1c95c6d5bbe80e

    • SHA512

      0d413f7201858f3bad1210f3480a7349b68ff5a33bf128743c229a62f3d52e76cde4c08fb9ff52cd6ab2116373491a1a5dbc5bf94c807d5834fe6f54de736e2e

    • SSDEEP

      6144:DL9LNkIt+toqltwfcpJHo4o0QQuNU3wqdL:95lt+toqqmCxVQu9q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks