General

  • Target

    f0d5664065e6f5ad9970a13c21098156b40b28a33232754d4c95760c09b43bd0

  • Size

    409KB

  • Sample

    241108-me9l6azmav

  • MD5

    7d98792f34ad7237bab8afd5405e28f6

  • SHA1

    d1ff06a471b777cefff5c8ade651a30d0d22b48c

  • SHA256

    f0d5664065e6f5ad9970a13c21098156b40b28a33232754d4c95760c09b43bd0

  • SHA512

    895348fe1c0f98b8f087f4094c298d261603800de80d9edec715e7c12c62677a1150d3cbbfe5aaadedf3bbcc91169cb388af7a52f8733cdd8cfc66a6a0773683

  • SSDEEP

    12288:KPSOQ4sS8V7lF9GG4koAUhSd8Z18Qvv1Byb:5wUFlRbUVZ13vb

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      f0d5664065e6f5ad9970a13c21098156b40b28a33232754d4c95760c09b43bd0

    • Size

      409KB

    • MD5

      7d98792f34ad7237bab8afd5405e28f6

    • SHA1

      d1ff06a471b777cefff5c8ade651a30d0d22b48c

    • SHA256

      f0d5664065e6f5ad9970a13c21098156b40b28a33232754d4c95760c09b43bd0

    • SHA512

      895348fe1c0f98b8f087f4094c298d261603800de80d9edec715e7c12c62677a1150d3cbbfe5aaadedf3bbcc91169cb388af7a52f8733cdd8cfc66a6a0773683

    • SSDEEP

      12288:KPSOQ4sS8V7lF9GG4koAUhSd8Z18Qvv1Byb:5wUFlRbUVZ13vb

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks