General

  • Target

    67fe2d073b1c978d3fef71cc04823a36ec49543b770f28557d9371528859ca56

  • Size

    224KB

  • Sample

    241106-m4tx1a1nej

  • MD5

    7eb47e53559eb0c8910e0ec4720f6679

  • SHA1

    0008bde8385422a4e872d191bd711246611b6b7d

  • SHA256

    67fe2d073b1c978d3fef71cc04823a36ec49543b770f28557d9371528859ca56

  • SHA512

    93fe10cc0eedef82caa3f316d69798b476962c029a8efc5299c72a30276e8a67fbe6f27167365b84d10fead471a7b2c24a938c8ad3fbd8b637d3faae2e1422cb

  • SSDEEP

    3072:d6oEE4DwSMpqrjY/B0Y2fiekFcoaleLiv7HdyJIQyrjqT5+x3Pqfk5rYiS/VZ:d6oODmqfYU6ekFgeLixyJlNT5+BP

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      67fe2d073b1c978d3fef71cc04823a36ec49543b770f28557d9371528859ca56

    • Size

      224KB

    • MD5

      7eb47e53559eb0c8910e0ec4720f6679

    • SHA1

      0008bde8385422a4e872d191bd711246611b6b7d

    • SHA256

      67fe2d073b1c978d3fef71cc04823a36ec49543b770f28557d9371528859ca56

    • SHA512

      93fe10cc0eedef82caa3f316d69798b476962c029a8efc5299c72a30276e8a67fbe6f27167365b84d10fead471a7b2c24a938c8ad3fbd8b637d3faae2e1422cb

    • SSDEEP

      3072:d6oEE4DwSMpqrjY/B0Y2fiekFcoaleLiv7HdyJIQyrjqT5+x3Pqfk5rYiS/VZ:d6oODmqfYU6ekFgeLixyJlNT5+BP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks