General

  • Target

    8c9784caef490d341216e0da306e7c033f6aab1216b7c52fbd1d83310290dd0e

  • Size

    292KB

  • Sample

    241105-qkxfkaseqk

  • MD5

    13dd7e712edc28b5ff055382950d8586

  • SHA1

    5b14475a26a24c455d9228f2b106bd10793255c0

  • SHA256

    8c9784caef490d341216e0da306e7c033f6aab1216b7c52fbd1d83310290dd0e

  • SHA512

    74de7290134355863441f158b9d848517800dc730301a2bf70f2ec08205829eb47ed57d1f99935c8e47d6a3a7b63d1dea52e995b7ceae01f123523d27f474b56

  • SSDEEP

    6144:cLT9vLXSf16blUFzG43TP4TS8N9gcDf/jhKyLfD:qpTSf1w+znKfBDTw8

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      8c9784caef490d341216e0da306e7c033f6aab1216b7c52fbd1d83310290dd0e

    • Size

      292KB

    • MD5

      13dd7e712edc28b5ff055382950d8586

    • SHA1

      5b14475a26a24c455d9228f2b106bd10793255c0

    • SHA256

      8c9784caef490d341216e0da306e7c033f6aab1216b7c52fbd1d83310290dd0e

    • SHA512

      74de7290134355863441f158b9d848517800dc730301a2bf70f2ec08205829eb47ed57d1f99935c8e47d6a3a7b63d1dea52e995b7ceae01f123523d27f474b56

    • SSDEEP

      6144:cLT9vLXSf16blUFzG43TP4TS8N9gcDf/jhKyLfD:qpTSf1w+znKfBDTw8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks