General

  • Target

    556c29ec392bede8fe666213c5871be78ac5465826128952727c732472ee9519

  • Size

    222KB

  • Sample

    241108-y4bxza1pen

  • MD5

    9bf8e89101405a89f814ad464c27b26d

  • SHA1

    2a1e5590687c16cdb13913438bbc2f82f68632f3

  • SHA256

    556c29ec392bede8fe666213c5871be78ac5465826128952727c732472ee9519

  • SHA512

    ec5ccf7abcaac5bba380971b5887b7f630fd21aecb356f353ba386f99978f45a00da0763e5feef0e63f653f3815101b14e0f2aba3970a25b647d6afb5dcf6ba5

  • SSDEEP

    3072:psZG7PWgPExXm6HXfQ7ItS9x9jlr3ZC4Y0K6jUJqyI5K7ak0Z:psZu+vxXm6HvQYSb5njq/z7a

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      556c29ec392bede8fe666213c5871be78ac5465826128952727c732472ee9519

    • Size

      222KB

    • MD5

      9bf8e89101405a89f814ad464c27b26d

    • SHA1

      2a1e5590687c16cdb13913438bbc2f82f68632f3

    • SHA256

      556c29ec392bede8fe666213c5871be78ac5465826128952727c732472ee9519

    • SHA512

      ec5ccf7abcaac5bba380971b5887b7f630fd21aecb356f353ba386f99978f45a00da0763e5feef0e63f653f3815101b14e0f2aba3970a25b647d6afb5dcf6ba5

    • SSDEEP

      3072:psZG7PWgPExXm6HXfQ7ItS9x9jlr3ZC4Y0K6jUJqyI5K7ak0Z:psZu+vxXm6HvQYSb5njq/z7a

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks