General

  • Target

    1767dcabc656f894e1016dc38c08c6193f4b782dad25eeda9b04abc50685ea2b

  • Size

    358KB

  • Sample

    241105-lrw16ayjcv

  • MD5

    1a5377e745ea0cd58b210c5285eda0c5

  • SHA1

    659b87de24d65241d6801b382bd9587f81125da9

  • SHA256

    1767dcabc656f894e1016dc38c08c6193f4b782dad25eeda9b04abc50685ea2b

  • SHA512

    db8dd89fab5021a31248ed0306b6192e873b07fb389d9129f32211e74b91dff7aa81c1a88cc0a311fddf05f89fa3bca0c8d4e13e7498c1fc2562c9020b746436

  • SSDEEP

    6144:uecjITQqb737wST3qGPdDJAtYn7c1qc6ofZfNHZRQz:uecjITQqbPwGV77c1qrwZfbR

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      1767dcabc656f894e1016dc38c08c6193f4b782dad25eeda9b04abc50685ea2b

    • Size

      358KB

    • MD5

      1a5377e745ea0cd58b210c5285eda0c5

    • SHA1

      659b87de24d65241d6801b382bd9587f81125da9

    • SHA256

      1767dcabc656f894e1016dc38c08c6193f4b782dad25eeda9b04abc50685ea2b

    • SHA512

      db8dd89fab5021a31248ed0306b6192e873b07fb389d9129f32211e74b91dff7aa81c1a88cc0a311fddf05f89fa3bca0c8d4e13e7498c1fc2562c9020b746436

    • SSDEEP

      6144:uecjITQqb737wST3qGPdDJAtYn7c1qc6ofZfNHZRQz:uecjITQqbPwGV77c1qrwZfbR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks