General

  • Target

    85be0390c2d422c6d02ffeafd38452e247fe7285e205d0355ba9d52aa9ddcb41

  • Size

    262KB

  • Sample

    241106-lvn5qaxhqb

  • MD5

    ff0ab45dd5c08d4e71e14962a80c8173

  • SHA1

    385ada09ad2ac0d4a7b8ed601b313ac0f804247f

  • SHA256

    85be0390c2d422c6d02ffeafd38452e247fe7285e205d0355ba9d52aa9ddcb41

  • SHA512

    f94c522aae13ff80cd3921d072929430d248cc1a1e85883b1ed76696c542b3816596ee36a03d645db96b783e8e83629a97372b6e59e28296e6225ff0a73e5693

  • SSDEEP

    6144:YleLRSAelxeADNpRo4DCOkXPggs1gqsZeCOz:SedSAuxeCDHD9P

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      85be0390c2d422c6d02ffeafd38452e247fe7285e205d0355ba9d52aa9ddcb41

    • Size

      262KB

    • MD5

      ff0ab45dd5c08d4e71e14962a80c8173

    • SHA1

      385ada09ad2ac0d4a7b8ed601b313ac0f804247f

    • SHA256

      85be0390c2d422c6d02ffeafd38452e247fe7285e205d0355ba9d52aa9ddcb41

    • SHA512

      f94c522aae13ff80cd3921d072929430d248cc1a1e85883b1ed76696c542b3816596ee36a03d645db96b783e8e83629a97372b6e59e28296e6225ff0a73e5693

    • SSDEEP

      6144:YleLRSAelxeADNpRo4DCOkXPggs1gqsZeCOz:SedSAuxeCDHD9P

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks