General

  • Target

    9295fd018d2da282adf81642fd57ff8f6665f6a61079bf0df0735bd30e45fef3

  • Size

    358KB

  • Sample

    241106-vjteqstfnh

  • MD5

    0207b74a9d595b66dbc57db727c05383

  • SHA1

    d3761cac4dec26e5122ca3eee52ae3f93289cc93

  • SHA256

    9295fd018d2da282adf81642fd57ff8f6665f6a61079bf0df0735bd30e45fef3

  • SHA512

    5b0912decfdc1ac165b835114146f0f55ad58885bef0b09a3fd6782ad14ae7a9ce000f295fdf9ee891b7df6d4c4c7bdfea6d65812a8f211ba60559a0a93c2d77

  • SSDEEP

    6144:YgrbpLLosbA3vZpKOv8aOOxuAsuWFTOwQS51F3WxKMhA/Lc:YgrbpHosbOZnDOOxb0TOw13FV

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      9295fd018d2da282adf81642fd57ff8f6665f6a61079bf0df0735bd30e45fef3

    • Size

      358KB

    • MD5

      0207b74a9d595b66dbc57db727c05383

    • SHA1

      d3761cac4dec26e5122ca3eee52ae3f93289cc93

    • SHA256

      9295fd018d2da282adf81642fd57ff8f6665f6a61079bf0df0735bd30e45fef3

    • SHA512

      5b0912decfdc1ac165b835114146f0f55ad58885bef0b09a3fd6782ad14ae7a9ce000f295fdf9ee891b7df6d4c4c7bdfea6d65812a8f211ba60559a0a93c2d77

    • SSDEEP

      6144:YgrbpLLosbA3vZpKOv8aOOxuAsuWFTOwQS51F3WxKMhA/Lc:YgrbpHosbOZnDOOxb0TOw13FV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks