General

  • Target

    484e18b4077546169f81e95e7005b06f85a1322297b809de12ded4d488b4dece

  • Size

    262KB

  • Sample

    241108-pmywqs1pc1

  • MD5

    cba6b68919716e3aa8754c80f4aa6895

  • SHA1

    ccfe622c8d83e74b69695692551c42ce94e06c12

  • SHA256

    484e18b4077546169f81e95e7005b06f85a1322297b809de12ded4d488b4dece

  • SHA512

    cdd53486bba32df774fa563e6c7eb247f1537faa9a183ce457eb4cfffa771511b8622df55c78b52056002ac811d41490b27919f675c8aab63c5dcdcf23c49fea

  • SSDEEP

    6144:0j5RLBCAelrHzb28SglBW7C6cGoT41saztnz:u5RNCAuruBoWbIT4uq

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      484e18b4077546169f81e95e7005b06f85a1322297b809de12ded4d488b4dece

    • Size

      262KB

    • MD5

      cba6b68919716e3aa8754c80f4aa6895

    • SHA1

      ccfe622c8d83e74b69695692551c42ce94e06c12

    • SHA256

      484e18b4077546169f81e95e7005b06f85a1322297b809de12ded4d488b4dece

    • SHA512

      cdd53486bba32df774fa563e6c7eb247f1537faa9a183ce457eb4cfffa771511b8622df55c78b52056002ac811d41490b27919f675c8aab63c5dcdcf23c49fea

    • SSDEEP

      6144:0j5RLBCAelrHzb28SglBW7C6cGoT41saztnz:u5RNCAuruBoWbIT4uq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks