General

  • Target

    63c4ee48941e8880d50ed70449a18290f2c975167dc345161884eafdd209b790

  • Size

    358KB

  • Sample

    241108-f26epawfnf

  • MD5

    b1da7ad03a8732d346d5299e25ad533e

  • SHA1

    59b63c7754bbec9a4e2404bdc36c8556ddd07fce

  • SHA256

    63c4ee48941e8880d50ed70449a18290f2c975167dc345161884eafdd209b790

  • SHA512

    2182568800a7a0054fbfb1395a24f132249efe693656f33f138ac6f43af4537e832b7008e623d10a4e1b6a5cea80eca8e40c7c6509b4828df0b359f0088ba012

  • SSDEEP

    6144:rZ4NIhQ5bQ3BuNFsQy9S4Zw42EO+dfSBdLbv/oo:rZ4NIhQ5bsu6XRSDLbo

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      63c4ee48941e8880d50ed70449a18290f2c975167dc345161884eafdd209b790

    • Size

      358KB

    • MD5

      b1da7ad03a8732d346d5299e25ad533e

    • SHA1

      59b63c7754bbec9a4e2404bdc36c8556ddd07fce

    • SHA256

      63c4ee48941e8880d50ed70449a18290f2c975167dc345161884eafdd209b790

    • SHA512

      2182568800a7a0054fbfb1395a24f132249efe693656f33f138ac6f43af4537e832b7008e623d10a4e1b6a5cea80eca8e40c7c6509b4828df0b359f0088ba012

    • SSDEEP

      6144:rZ4NIhQ5bQ3BuNFsQy9S4Zw42EO+dfSBdLbv/oo:rZ4NIhQ5bsu6XRSDLbo

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks