General

  • Target

    d63f9f35465d48ec44476bb09020ed52e8a11f784cbd62c3cf2fc5c1d6240838

  • Size

    356KB

  • Sample

    241106-wbglmsvbpa

  • MD5

    3da900d485e80170864240d60b1d4e18

  • SHA1

    8b98f142742743c6ed13e25d35daffbf6503fd9e

  • SHA256

    d63f9f35465d48ec44476bb09020ed52e8a11f784cbd62c3cf2fc5c1d6240838

  • SHA512

    f718b6710241abc755f1719193e114e18bead256307017fb15c588fe312b004f62b216b153347659d621f8c07c4d40dafc3840d599a13575669803d24160a717

  • SSDEEP

    6144:tEepmrN8tp2KU43t6KiTNI8rzGmFeBPzlC0GavaN:JpmrWtp2KU43t4JZz1el0+vaN

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      d63f9f35465d48ec44476bb09020ed52e8a11f784cbd62c3cf2fc5c1d6240838

    • Size

      356KB

    • MD5

      3da900d485e80170864240d60b1d4e18

    • SHA1

      8b98f142742743c6ed13e25d35daffbf6503fd9e

    • SHA256

      d63f9f35465d48ec44476bb09020ed52e8a11f784cbd62c3cf2fc5c1d6240838

    • SHA512

      f718b6710241abc755f1719193e114e18bead256307017fb15c588fe312b004f62b216b153347659d621f8c07c4d40dafc3840d599a13575669803d24160a717

    • SSDEEP

      6144:tEepmrN8tp2KU43t6KiTNI8rzGmFeBPzlC0GavaN:JpmrWtp2KU43t4JZz1el0+vaN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks