General

  • Target

    0ed2ac47fd8e9dd67aaa58635c495f743384e4cc1897072aaeecf3814ed92e26N

  • Size

    95KB

  • Sample

    241105-p1c67atnen

  • MD5

    63086f19648b4c392188575c455e2840

  • SHA1

    2182d55f0dd4753022978a8000a29c0ffe08723c

  • SHA256

    0ed2ac47fd8e9dd67aaa58635c495f743384e4cc1897072aaeecf3814ed92e26

  • SHA512

    1140b81517a6a671fb8036786c5a9a4fdbde58bb7ab7579d4688f61a38af59a00ebdbade5ba9de522c09d2a826facf715db3a809bb1271aa941d0fa70be9ab75

  • SSDEEP

    1536:1qswlqWWlbG6jejoigI/43Ywzi0Zb78ivombfexv0ujXyyed243teulgS6pg:zgReY/+zi0ZbYe1g0ujyzdWg

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

127.0.0.1:46159

Targets

    • Target

      0ed2ac47fd8e9dd67aaa58635c495f743384e4cc1897072aaeecf3814ed92e26N

    • Size

      95KB

    • MD5

      63086f19648b4c392188575c455e2840

    • SHA1

      2182d55f0dd4753022978a8000a29c0ffe08723c

    • SHA256

      0ed2ac47fd8e9dd67aaa58635c495f743384e4cc1897072aaeecf3814ed92e26

    • SHA512

      1140b81517a6a671fb8036786c5a9a4fdbde58bb7ab7579d4688f61a38af59a00ebdbade5ba9de522c09d2a826facf715db3a809bb1271aa941d0fa70be9ab75

    • SSDEEP

      1536:1qswlqWWlbG6jejoigI/43Ywzi0Zb78ivombfexv0ujXyyed243teulgS6pg:zgReY/+zi0ZbYe1g0ujyzdWg

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks