General

  • Target

    f57030f63e114c7b121e096205c88a58046fd399213659cf3a388e395465aff3

  • Size

    410KB

  • Sample

    241105-mgcp7szfrj

  • MD5

    ce069236d19ff1aec306964462836aa5

  • SHA1

    872827ea2674d3039cece9293180381d52bb2168

  • SHA256

    f57030f63e114c7b121e096205c88a58046fd399213659cf3a388e395465aff3

  • SHA512

    1fbcc5e6447345ec65564c11a9406d739873c8fc46e9b7e8addf2ea35094ff7c9d9feb3937705f496869a912b56ae708b01ed9accd6b7ebf032163b26e5b5ad0

  • SSDEEP

    12288:ib/O6lVqKioAt5h5BneDGbklgYdgzLSAYcc:iLN+3YqklqzLSA5c

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      f57030f63e114c7b121e096205c88a58046fd399213659cf3a388e395465aff3

    • Size

      410KB

    • MD5

      ce069236d19ff1aec306964462836aa5

    • SHA1

      872827ea2674d3039cece9293180381d52bb2168

    • SHA256

      f57030f63e114c7b121e096205c88a58046fd399213659cf3a388e395465aff3

    • SHA512

      1fbcc5e6447345ec65564c11a9406d739873c8fc46e9b7e8addf2ea35094ff7c9d9feb3937705f496869a912b56ae708b01ed9accd6b7ebf032163b26e5b5ad0

    • SSDEEP

      12288:ib/O6lVqKioAt5h5BneDGbklgYdgzLSAYcc:iLN+3YqklqzLSA5c

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks