General

  • Target

    0b328273f6ac536a2d12c26068f5309cfbc7953c1d0abbd40a456db743dbe3ba

  • Size

    345KB

  • Sample

    241106-lbmgsazmhk

  • MD5

    e93cf832cebfcf4ce8bd9f03a8e8e2af

  • SHA1

    66ab310783ccf2bad2c968a6e5921fc4a59dc77a

  • SHA256

    0b328273f6ac536a2d12c26068f5309cfbc7953c1d0abbd40a456db743dbe3ba

  • SHA512

    d35c11be2ae1a1c4ba8c19a2b75226a8f6df406b871520080fd3d43d34999d1659fa520da980cf03d0fa8436c89d65a83c39dd4d2c77e81979e908694ee4a02d

  • SSDEEP

    6144:6q5qWeKVw47YLEeEgCRS/eNDxxA/7n2spQlFzsSw0Wc4ADIUVyV:1qiVw47YLYvI2NDw72smrsSwyIA

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      0b328273f6ac536a2d12c26068f5309cfbc7953c1d0abbd40a456db743dbe3ba

    • Size

      345KB

    • MD5

      e93cf832cebfcf4ce8bd9f03a8e8e2af

    • SHA1

      66ab310783ccf2bad2c968a6e5921fc4a59dc77a

    • SHA256

      0b328273f6ac536a2d12c26068f5309cfbc7953c1d0abbd40a456db743dbe3ba

    • SHA512

      d35c11be2ae1a1c4ba8c19a2b75226a8f6df406b871520080fd3d43d34999d1659fa520da980cf03d0fa8436c89d65a83c39dd4d2c77e81979e908694ee4a02d

    • SSDEEP

      6144:6q5qWeKVw47YLEeEgCRS/eNDxxA/7n2spQlFzsSw0Wc4ADIUVyV:1qiVw47YLYvI2NDw72smrsSwyIA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks