General

  • Target

    14cb89a48f14bc17b1462a367bf5652808f4c1fa3b31c023e5796b7da4a09b89

  • Size

    95KB

  • Sample

    241108-enlbxsxpbq

  • MD5

    bdb2daac94b2af3ca90a09d21dba7d3c

  • SHA1

    2060b7e7642643dac15c696f98caa1c6786d8770

  • SHA256

    14cb89a48f14bc17b1462a367bf5652808f4c1fa3b31c023e5796b7da4a09b89

  • SHA512

    7ae0a95bb904a31469582cd45722830d0067093dcae4b991e37f326733a9758c482fbde8b97960fc32cfe254d22e418b1b33a15acaa05ffc6544385a83415cc8

  • SSDEEP

    1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2Q3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdeY

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

172.31.59.167:46956

Targets

    • Target

      14cb89a48f14bc17b1462a367bf5652808f4c1fa3b31c023e5796b7da4a09b89

    • Size

      95KB

    • MD5

      bdb2daac94b2af3ca90a09d21dba7d3c

    • SHA1

      2060b7e7642643dac15c696f98caa1c6786d8770

    • SHA256

      14cb89a48f14bc17b1462a367bf5652808f4c1fa3b31c023e5796b7da4a09b89

    • SHA512

      7ae0a95bb904a31469582cd45722830d0067093dcae4b991e37f326733a9758c482fbde8b97960fc32cfe254d22e418b1b33a15acaa05ffc6544385a83415cc8

    • SSDEEP

      1536:9qsINqLGlbG6jejoigI343Ywzi0Zb78ivombfexv0ujXyyed2Q3teulgS6pY:rAMOY3+zi0ZbYe1g0ujyzdeY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks