General

  • Target

    ca1a836f63f9d9ca388cde62064c478aae86f881e7dd0078ec0890b3eb697ff6

  • Size

    380KB

  • Sample

    241106-qyhvbs1hjm

  • MD5

    22dea4ff9a9849abdd30e559b8dfea78

  • SHA1

    c9b4753197c416720da2bb923eb52fada99d8d4b

  • SHA256

    ca1a836f63f9d9ca388cde62064c478aae86f881e7dd0078ec0890b3eb697ff6

  • SHA512

    a7fedc6b97981687118ecc62ccf8141707c66af3936d869e52d65307dcc51b22f71d23b6a07e7a68e9dabbfc81741d8571cd164da8725019b33a8f558d3da5e6

  • SSDEEP

    6144:8MmvH3KGI9/5RaqyF/Vq+JF3PGf0gOnYz9WIGrzmkRae:qvH3KGIp5tyS+JZDYZWlrzmkRB

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      ca1a836f63f9d9ca388cde62064c478aae86f881e7dd0078ec0890b3eb697ff6

    • Size

      380KB

    • MD5

      22dea4ff9a9849abdd30e559b8dfea78

    • SHA1

      c9b4753197c416720da2bb923eb52fada99d8d4b

    • SHA256

      ca1a836f63f9d9ca388cde62064c478aae86f881e7dd0078ec0890b3eb697ff6

    • SHA512

      a7fedc6b97981687118ecc62ccf8141707c66af3936d869e52d65307dcc51b22f71d23b6a07e7a68e9dabbfc81741d8571cd164da8725019b33a8f558d3da5e6

    • SSDEEP

      6144:8MmvH3KGI9/5RaqyF/Vq+JF3PGf0gOnYz9WIGrzmkRae:qvH3KGIp5tyS+JZDYZWlrzmkRB

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks