General

  • Target

    f797858dee578b99852c3896a9ff46f145b859cfed9241de284f1e46469ad2de

  • Size

    319KB

  • Sample

    241108-x5akvsxlcw

  • MD5

    9b12fe1d432226eb42aab29c08c743c0

  • SHA1

    e8eee826b23217787696cebb258656c34e9ef77f

  • SHA256

    f797858dee578b99852c3896a9ff46f145b859cfed9241de284f1e46469ad2de

  • SHA512

    c6aa7e2a534495d60361e481ed607691f3a18550d4537f960ab1e85ccb69a405cbeae98c4c4c733edc9023390d9c9c1d7733e186242062ca41ec07d47478e94e

  • SSDEEP

    6144:OCp4LXhCQeIQH4usjsSqIOf+qrLbPao+V9O:mLhCQebHzS1qDg

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      f797858dee578b99852c3896a9ff46f145b859cfed9241de284f1e46469ad2de

    • Size

      319KB

    • MD5

      9b12fe1d432226eb42aab29c08c743c0

    • SHA1

      e8eee826b23217787696cebb258656c34e9ef77f

    • SHA256

      f797858dee578b99852c3896a9ff46f145b859cfed9241de284f1e46469ad2de

    • SHA512

      c6aa7e2a534495d60361e481ed607691f3a18550d4537f960ab1e85ccb69a405cbeae98c4c4c733edc9023390d9c9c1d7733e186242062ca41ec07d47478e94e

    • SSDEEP

      6144:OCp4LXhCQeIQH4usjsSqIOf+qrLbPao+V9O:mLhCQebHzS1qDg

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks