General

  • Target

    0f394dc4c47d883aa44ff07b2a484026580c4ebcaf4ef61bd894b206a75c677e

  • Size

    318KB

  • Sample

    241109-dd4j3svney

  • MD5

    575dc73ece54e6017b078b4a5d6e6460

  • SHA1

    8d991b6541b4f2ff2a66ddaada7eb819af5932aa

  • SHA256

    0f394dc4c47d883aa44ff07b2a484026580c4ebcaf4ef61bd894b206a75c677e

  • SHA512

    70ef38205043e74ec69702ea2672dc02206c35a499d26e973971dcf16842431d740cbb1cf085f61ec14da85525867ad5921fec9da62f4758579ea9b465e83b15

  • SSDEEP

    6144:i3T9vLfSj1dnXugywp8Zy+SoSmZZpIneRZMfO:MpLSj1d+u86oSmZIIe

Malware Config

Extracted

Family

redline

Botnet

12h

C2

84.246.85.209:45214

Targets

    • Target

      0f394dc4c47d883aa44ff07b2a484026580c4ebcaf4ef61bd894b206a75c677e

    • Size

      318KB

    • MD5

      575dc73ece54e6017b078b4a5d6e6460

    • SHA1

      8d991b6541b4f2ff2a66ddaada7eb819af5932aa

    • SHA256

      0f394dc4c47d883aa44ff07b2a484026580c4ebcaf4ef61bd894b206a75c677e

    • SHA512

      70ef38205043e74ec69702ea2672dc02206c35a499d26e973971dcf16842431d740cbb1cf085f61ec14da85525867ad5921fec9da62f4758579ea9b465e83b15

    • SSDEEP

      6144:i3T9vLfSj1dnXugywp8Zy+SoSmZZpIneRZMfO:MpLSj1d+u86oSmZIIe

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks