General

  • Target

    d69ad112d6dc03e21eda70613365ccfbc496d2a5b9efc5670c42ad473289f39e

  • Size

    239KB

  • Sample

    241107-c7s5rswlep

  • MD5

    a1489c9ff8a26e265dc7d8267103a64d

  • SHA1

    983db50bef71980c62589d9b9746544a473edf96

  • SHA256

    d69ad112d6dc03e21eda70613365ccfbc496d2a5b9efc5670c42ad473289f39e

  • SHA512

    510b2cdc7f2d0b8be0fe371e50e6648400d46e678ac2e676f67c8d48a18f12fc3cd07bffd334a89360941f149d2e7e8722b2aafdfd162bb5c8b7a91458d5020a

  • SSDEEP

    6144:uhPuZpab4Xi/OLGHpuMomrmU8uer4PTkwOoA8O:JZp8OihHpubUdkw

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      d69ad112d6dc03e21eda70613365ccfbc496d2a5b9efc5670c42ad473289f39e

    • Size

      239KB

    • MD5

      a1489c9ff8a26e265dc7d8267103a64d

    • SHA1

      983db50bef71980c62589d9b9746544a473edf96

    • SHA256

      d69ad112d6dc03e21eda70613365ccfbc496d2a5b9efc5670c42ad473289f39e

    • SHA512

      510b2cdc7f2d0b8be0fe371e50e6648400d46e678ac2e676f67c8d48a18f12fc3cd07bffd334a89360941f149d2e7e8722b2aafdfd162bb5c8b7a91458d5020a

    • SSDEEP

      6144:uhPuZpab4Xi/OLGHpuMomrmU8uer4PTkwOoA8O:JZp8OihHpubUdkw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks