General

  • Target

    90658b748276a66be517b1d23ca904e7e4c64a13b96da4d19be6d87dedf98b06

  • Size

    315KB

  • Sample

    241105-t8ahgstpfy

  • MD5

    f1e90f5f3c16c84032a980151167e61e

  • SHA1

    e761c716de941231463c17a406fd240713c890bd

  • SHA256

    90658b748276a66be517b1d23ca904e7e4c64a13b96da4d19be6d87dedf98b06

  • SHA512

    ffc5b17802e4b4b3b3b324196a6aa724daa5754485a8f8a98863df133e11abbbb52a8be3e76e4c943aa1b0b3ed6c95c4327af289cb399fa609d6d29a9f7c2d79

  • SSDEEP

    6144:23eVMrg5bXtNCL3osLTmbANPpbumuMlEFt8L68v4MV:23Wn5bTCLXmUNJq3+

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      90658b748276a66be517b1d23ca904e7e4c64a13b96da4d19be6d87dedf98b06

    • Size

      315KB

    • MD5

      f1e90f5f3c16c84032a980151167e61e

    • SHA1

      e761c716de941231463c17a406fd240713c890bd

    • SHA256

      90658b748276a66be517b1d23ca904e7e4c64a13b96da4d19be6d87dedf98b06

    • SHA512

      ffc5b17802e4b4b3b3b324196a6aa724daa5754485a8f8a98863df133e11abbbb52a8be3e76e4c943aa1b0b3ed6c95c4327af289cb399fa609d6d29a9f7c2d79

    • SSDEEP

      6144:23eVMrg5bXtNCL3osLTmbANPpbumuMlEFt8L68v4MV:23Wn5bTCLXmUNJq3+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks