General

  • Target

    e7731f6a23777329934226d7a8ce532bdfafb0eb1cf40033e0e2adfbd85df5cd

  • Size

    357KB

  • Sample

    241108-lrdvksspak

  • MD5

    57735c50e0fdf7fa1f695b8f622f927d

  • SHA1

    2821989e3c47af9f9d4d71bdacc8de9891956880

  • SHA256

    e7731f6a23777329934226d7a8ce532bdfafb0eb1cf40033e0e2adfbd85df5cd

  • SHA512

    7f81c75322500de40fac508d984887c3d7f4e685bbd0ee2f62c5d39b1338a119fa77f746fbc837ab53c7729c81b0f15007777a5575f3b94edc62f2dd482d7277

  • SSDEEP

    6144:ckeDnApQETbE3MMAP22ejxkRlE5Rp89vf8ZTOJgqf29Q:ckeDnApQmb9MAORY4898ZTQgq

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      e7731f6a23777329934226d7a8ce532bdfafb0eb1cf40033e0e2adfbd85df5cd

    • Size

      357KB

    • MD5

      57735c50e0fdf7fa1f695b8f622f927d

    • SHA1

      2821989e3c47af9f9d4d71bdacc8de9891956880

    • SHA256

      e7731f6a23777329934226d7a8ce532bdfafb0eb1cf40033e0e2adfbd85df5cd

    • SHA512

      7f81c75322500de40fac508d984887c3d7f4e685bbd0ee2f62c5d39b1338a119fa77f746fbc837ab53c7729c81b0f15007777a5575f3b94edc62f2dd482d7277

    • SSDEEP

      6144:ckeDnApQETbE3MMAP22ejxkRlE5Rp89vf8ZTOJgqf29Q:ckeDnApQmb9MAORY4898ZTQgq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks