General

  • Target

    bd8342dfa44072d3028441366e4ac3c69443ecdee2be9af994e1501e986637b1

  • Size

    316KB

  • Sample

    241106-p1181s1clq

  • MD5

    942a941f21a4acf70dea5e388d8fcf92

  • SHA1

    d061a83f63eed859770407500d183ffa21d7ebc0

  • SHA256

    bd8342dfa44072d3028441366e4ac3c69443ecdee2be9af994e1501e986637b1

  • SHA512

    f3e725b8d6a604924de5b2e5fc047c7c9b2afe2a1174b382bbbd275da2319a1303cd697c8ece66dad62bf12bd6cff58673958e4043c6ba858f34854336b1f411

  • SSDEEP

    6144:kowPj7Pt/KnUXsi+b7iUaqaVT/VFaY9G1sj0gPPVFt:kowPj7xKnEEbe/qaV77a2G1sjDV

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      bd8342dfa44072d3028441366e4ac3c69443ecdee2be9af994e1501e986637b1

    • Size

      316KB

    • MD5

      942a941f21a4acf70dea5e388d8fcf92

    • SHA1

      d061a83f63eed859770407500d183ffa21d7ebc0

    • SHA256

      bd8342dfa44072d3028441366e4ac3c69443ecdee2be9af994e1501e986637b1

    • SHA512

      f3e725b8d6a604924de5b2e5fc047c7c9b2afe2a1174b382bbbd275da2319a1303cd697c8ece66dad62bf12bd6cff58673958e4043c6ba858f34854336b1f411

    • SSDEEP

      6144:kowPj7Pt/KnUXsi+b7iUaqaVT/VFaY9G1sj0gPPVFt:kowPj7xKnEEbe/qaV77a2G1sjDV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks