General

  • Target

    5781308909462e30e8f723e62293ae4c4769c613e3b90842fae159949eaf5b04

  • Size

    224KB

  • Sample

    241106-j8p8tswkbz

  • MD5

    45f6990462a1428b35948ef13a81f000

  • SHA1

    898e0507979bf0a9cb12ffc2bdc4af3d185c1584

  • SHA256

    5781308909462e30e8f723e62293ae4c4769c613e3b90842fae159949eaf5b04

  • SHA512

    f6210af20f58e42f6d06dd5f45aec915cc151bde8a771816b2087160866a6bd7699f140e5dcd870c18b9527596a1e054b6c51c7813835fde9dcfc36dc05a0333

  • SSDEEP

    3072:a6oEEvYLnJrA4zwtMcTKoxlcoFvrfUd+nztxXcILjaHHD/WKPJ7sbWCpxF6mzcKv:a6oskMcTKXoxflnbbjgh7shxJzcO

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      5781308909462e30e8f723e62293ae4c4769c613e3b90842fae159949eaf5b04

    • Size

      224KB

    • MD5

      45f6990462a1428b35948ef13a81f000

    • SHA1

      898e0507979bf0a9cb12ffc2bdc4af3d185c1584

    • SHA256

      5781308909462e30e8f723e62293ae4c4769c613e3b90842fae159949eaf5b04

    • SHA512

      f6210af20f58e42f6d06dd5f45aec915cc151bde8a771816b2087160866a6bd7699f140e5dcd870c18b9527596a1e054b6c51c7813835fde9dcfc36dc05a0333

    • SSDEEP

      3072:a6oEEvYLnJrA4zwtMcTKoxlcoFvrfUd+nztxXcILjaHHD/WKPJ7sbWCpxF6mzcKv:a6oskMcTKXoxflnbbjgh7shxJzcO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks