General

  • Target

    45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678

  • Size

    315KB

  • Sample

    241105-v1xtgsvkcv

  • MD5

    4c79bd9380c0919ea5cefd071440237f

  • SHA1

    79edb2ab12d2615fd22dfb7b2a75b23aa4b7b18f

  • SHA256

    45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678

  • SHA512

    f68af523aab517794b16d367f4ee746b056c1c7a5ccf7f66b9770f74f7b3adb9b3f90ffb9e1190092e4700f5cb85b6613a4482dd30ba899f1d2eb83c630097c6

  • SSDEEP

    6144:JxF4f/nJWHDSdh2WNTWSgZdf/e1zB3BYhrFLqZjG05pl:JxF4f/MDSdh3NTWSgZdfCBRYhrFLyyMr

Malware Config

Extracted

Family

redline

C2

185.183.32.193:24657

Targets

    • Target

      45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678

    • Size

      315KB

    • MD5

      4c79bd9380c0919ea5cefd071440237f

    • SHA1

      79edb2ab12d2615fd22dfb7b2a75b23aa4b7b18f

    • SHA256

      45a3ac1cd1870d43581cabbc768131e3c4e8f74805b0b8b1acaec3c6740d0678

    • SHA512

      f68af523aab517794b16d367f4ee746b056c1c7a5ccf7f66b9770f74f7b3adb9b3f90ffb9e1190092e4700f5cb85b6613a4482dd30ba899f1d2eb83c630097c6

    • SSDEEP

      6144:JxF4f/nJWHDSdh2WNTWSgZdf/e1zB3BYhrFLqZjG05pl:JxF4f/MDSdh3NTWSgZdfCBRYhrFLyyMr

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks