General

  • Target

    30b3ebcc5112ee534005e82910df1948204704121a63acb204973f32dabc0acc

  • Size

    345KB

  • Sample

    241107-3vw9rszlgy

  • MD5

    9f67c9ea5895ad4e162266bd0f82fcf7

  • SHA1

    998ec992cd652f9c7403bd02910300627dd64ecf

  • SHA256

    30b3ebcc5112ee534005e82910df1948204704121a63acb204973f32dabc0acc

  • SHA512

    3f4af51412b723367aee541d87e73626577dfa57aaaf6b349b065203ead0e8f0f02a666bcf3ff22f94f8fb63caeb8fab096055c804d5e789211fded9855ea965

  • SSDEEP

    6144:33MdeKeo1RuYLkedgCTo0lT0IKirdxztVj7iYU05fTgIU3M:Mreo1RuYLpvTJTTXdxzHiYU8rv

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      30b3ebcc5112ee534005e82910df1948204704121a63acb204973f32dabc0acc

    • Size

      345KB

    • MD5

      9f67c9ea5895ad4e162266bd0f82fcf7

    • SHA1

      998ec992cd652f9c7403bd02910300627dd64ecf

    • SHA256

      30b3ebcc5112ee534005e82910df1948204704121a63acb204973f32dabc0acc

    • SHA512

      3f4af51412b723367aee541d87e73626577dfa57aaaf6b349b065203ead0e8f0f02a666bcf3ff22f94f8fb63caeb8fab096055c804d5e789211fded9855ea965

    • SSDEEP

      6144:33MdeKeo1RuYLkedgCTo0lT0IKirdxztVj7iYU05fTgIU3M:Mreo1RuYLpvTJTTXdxzHiYU8rv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks