General

  • Target

    74ab89d0aadbbcbb5b07ed06817a3c781f192e99a08e8c7240e424240415e923

  • Size

    271KB

  • Sample

    241106-kt955axcna

  • MD5

    502f89912e90a846d4c9835a6fcde676

  • SHA1

    ff18279325b739ca9eec711a3fe2ff130ce28861

  • SHA256

    74ab89d0aadbbcbb5b07ed06817a3c781f192e99a08e8c7240e424240415e923

  • SHA512

    372e40ae9000a76a53d91aab4274b5bd3e5a3e991b377f1d96dce9d4cdd8dd078bfe25b27d30d36be04a3cf7a87e511a63ad1074f9fbf33bfbe1528e543ed7b0

  • SSDEEP

    6144:Ew97LrYbc1ytMVnPnLRlujDhyr9O8QSMasj5gZgmPPuydn:h974bcQK9LRAvhyjs2/Puy

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      74ab89d0aadbbcbb5b07ed06817a3c781f192e99a08e8c7240e424240415e923

    • Size

      271KB

    • MD5

      502f89912e90a846d4c9835a6fcde676

    • SHA1

      ff18279325b739ca9eec711a3fe2ff130ce28861

    • SHA256

      74ab89d0aadbbcbb5b07ed06817a3c781f192e99a08e8c7240e424240415e923

    • SHA512

      372e40ae9000a76a53d91aab4274b5bd3e5a3e991b377f1d96dce9d4cdd8dd078bfe25b27d30d36be04a3cf7a87e511a63ad1074f9fbf33bfbe1528e543ed7b0

    • SSDEEP

      6144:Ew97LrYbc1ytMVnPnLRlujDhyr9O8QSMasj5gZgmPPuydn:h974bcQK9LRAvhyjs2/Puy

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks