General

  • Target

    38450675c73f54b19700fa0c1fb0613e8d7f81f3c9fe489734576185eac705bd

  • Size

    283KB

  • Sample

    241105-fq5n1swcmk

  • MD5

    74b14fbf0b5de2d3bb4409a6470b33de

  • SHA1

    78961250937fd62cbd4e8737e7ee1cd8d4c904e8

  • SHA256

    38450675c73f54b19700fa0c1fb0613e8d7f81f3c9fe489734576185eac705bd

  • SHA512

    95d38fdf53f3450dc8fa83a8cbe9005b7fceeca5801acd47ce04703bcc0edee2802dafabd40017fc5d57a7ec23808ef991978b76c3525f3ef98a5cf3d534a661

  • SSDEEP

    6144:Kic3QhIuwr4fE3Va93p40D+NcbFP7OattVUMCq5Q:lc3CQ4fE3V440Dmcbl7XUM0

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      38450675c73f54b19700fa0c1fb0613e8d7f81f3c9fe489734576185eac705bd

    • Size

      283KB

    • MD5

      74b14fbf0b5de2d3bb4409a6470b33de

    • SHA1

      78961250937fd62cbd4e8737e7ee1cd8d4c904e8

    • SHA256

      38450675c73f54b19700fa0c1fb0613e8d7f81f3c9fe489734576185eac705bd

    • SHA512

      95d38fdf53f3450dc8fa83a8cbe9005b7fceeca5801acd47ce04703bcc0edee2802dafabd40017fc5d57a7ec23808ef991978b76c3525f3ef98a5cf3d534a661

    • SSDEEP

      6144:Kic3QhIuwr4fE3Va93p40D+NcbFP7OattVUMCq5Q:lc3CQ4fE3V440Dmcbl7XUM0

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks