General

  • Target

    29ad82bca1afec5a54457cea91585789b3fccc66a9f74be235965ccb8295d250

  • Size

    293KB

  • Sample

    241106-1krv7a1jck

  • MD5

    93c10d9ad784b4a8def1ad2041e59ee9

  • SHA1

    c81a8ff71118fcb2b879264acbe57ff27fd62b2c

  • SHA256

    29ad82bca1afec5a54457cea91585789b3fccc66a9f74be235965ccb8295d250

  • SHA512

    0f096f288831f3effb37ea1ee0748eead7ad2cf6b12fe7cd38340fd6d61f1ddf98aed79294b97fdcf81d060c0303af2749c5d04722939a6c8ce5a395085e611e

  • SSDEEP

    6144:1OvULS82v9aA8wFZmXQ/4VUHGjBRPGAYrz5JHmu7Aus:1XX2vMA8wvBwcC7dluM5

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      29ad82bca1afec5a54457cea91585789b3fccc66a9f74be235965ccb8295d250

    • Size

      293KB

    • MD5

      93c10d9ad784b4a8def1ad2041e59ee9

    • SHA1

      c81a8ff71118fcb2b879264acbe57ff27fd62b2c

    • SHA256

      29ad82bca1afec5a54457cea91585789b3fccc66a9f74be235965ccb8295d250

    • SHA512

      0f096f288831f3effb37ea1ee0748eead7ad2cf6b12fe7cd38340fd6d61f1ddf98aed79294b97fdcf81d060c0303af2749c5d04722939a6c8ce5a395085e611e

    • SSDEEP

      6144:1OvULS82v9aA8wFZmXQ/4VUHGjBRPGAYrz5JHmu7Aus:1XX2vMA8wvBwcC7dluM5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks