General

  • Target

    f3d4b1cac9d6c6581e11e6d3cf6bce1ebddb1589dc77435f6298db067cd90444

  • Size

    313KB

  • Sample

    241106-v1c43svenm

  • MD5

    0a02da37a77e6c0e1dafcbb3afcbd117

  • SHA1

    52eebea8a731064a86dcb259e261077659a2665b

  • SHA256

    f3d4b1cac9d6c6581e11e6d3cf6bce1ebddb1589dc77435f6298db067cd90444

  • SHA512

    5283e80e0df8a997ec0603e0310e5059357308855e69f90055ce510b6e340805563e8d8bc5e0bbb029409bd948837664ac9cb995c1909823502c19bb15875192

  • SSDEEP

    6144:7GZQNdJLiTp74SmU3UI6rzJGbc3PSpXjTyfNHyuAx3XLW0ZE:6Z1Tp74SAI6/JGWfgu0Xa0K

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      f3d4b1cac9d6c6581e11e6d3cf6bce1ebddb1589dc77435f6298db067cd90444

    • Size

      313KB

    • MD5

      0a02da37a77e6c0e1dafcbb3afcbd117

    • SHA1

      52eebea8a731064a86dcb259e261077659a2665b

    • SHA256

      f3d4b1cac9d6c6581e11e6d3cf6bce1ebddb1589dc77435f6298db067cd90444

    • SHA512

      5283e80e0df8a997ec0603e0310e5059357308855e69f90055ce510b6e340805563e8d8bc5e0bbb029409bd948837664ac9cb995c1909823502c19bb15875192

    • SSDEEP

      6144:7GZQNdJLiTp74SmU3UI6rzJGbc3PSpXjTyfNHyuAx3XLW0ZE:6Z1Tp74SAI6/JGWfgu0Xa0K

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks