General

  • Target

    7113fcbe8738d2d92296f50840de8b3349ec1b43da22010993df6299fe183144

  • Size

    359KB

  • Sample

    241109-q324rsvkdw

  • MD5

    e0e4cbccebb23c290228d5315e7c71ab

  • SHA1

    aca374e225b40f697e7c7f0dce830fa7bbcf6803

  • SHA256

    7113fcbe8738d2d92296f50840de8b3349ec1b43da22010993df6299fe183144

  • SHA512

    c2ac0a293c766f9be87c4ef9fdd7c202e751d62dff002eebe2c9110ca278951c834b299490321fcf509ea62ac937d5543199636ba865c99043dea345d4e568ba

  • SSDEEP

    6144:6yxacAmHHPqpY+k84Z93GjpmA0H5GsWnvsYb5n2zrYUJ6PF:6yxDAmHypoN38gAyg7vb5n2zEG6t

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      7113fcbe8738d2d92296f50840de8b3349ec1b43da22010993df6299fe183144

    • Size

      359KB

    • MD5

      e0e4cbccebb23c290228d5315e7c71ab

    • SHA1

      aca374e225b40f697e7c7f0dce830fa7bbcf6803

    • SHA256

      7113fcbe8738d2d92296f50840de8b3349ec1b43da22010993df6299fe183144

    • SHA512

      c2ac0a293c766f9be87c4ef9fdd7c202e751d62dff002eebe2c9110ca278951c834b299490321fcf509ea62ac937d5543199636ba865c99043dea345d4e568ba

    • SSDEEP

      6144:6yxacAmHHPqpY+k84Z93GjpmA0H5GsWnvsYb5n2zrYUJ6PF:6yxDAmHypoN38gAyg7vb5n2zEG6t

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks