General

  • Target

    fe46f596ff5a0920a901f7f97112d35d4033cb6008667fba7af19e6d9e6c0b3f

  • Size

    320KB

  • Sample

    241109-bhsbhasrd1

  • MD5

    ff3f051759e00cc45e9c8334703f8cc5

  • SHA1

    fb29dbad283001d0adad931bd707c194a1ceb6b7

  • SHA256

    fe46f596ff5a0920a901f7f97112d35d4033cb6008667fba7af19e6d9e6c0b3f

  • SHA512

    2c29ca0904092591bd3b1acddf232f282fbc1af9d995c134a3936f08e74e18d385e918c9ddfba7a5ac143d6604c35f67d51ba0df5dd8b471f99d69f29f113494

  • SSDEEP

    6144:0mNLCq4fJZvWKm6xtoD1SHG3o92jF3YiROz5JHD1yIP:XL+f7WLtvouFoEIP

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      fe46f596ff5a0920a901f7f97112d35d4033cb6008667fba7af19e6d9e6c0b3f

    • Size

      320KB

    • MD5

      ff3f051759e00cc45e9c8334703f8cc5

    • SHA1

      fb29dbad283001d0adad931bd707c194a1ceb6b7

    • SHA256

      fe46f596ff5a0920a901f7f97112d35d4033cb6008667fba7af19e6d9e6c0b3f

    • SHA512

      2c29ca0904092591bd3b1acddf232f282fbc1af9d995c134a3936f08e74e18d385e918c9ddfba7a5ac143d6604c35f67d51ba0df5dd8b471f99d69f29f113494

    • SSDEEP

      6144:0mNLCq4fJZvWKm6xtoD1SHG3o92jF3YiROz5JHD1yIP:XL+f7WLtvouFoEIP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks