General

  • Target

    b31461f9481d6f3fcf5f8c75751c688c65d30435c232eac35ee75d5149b68a1d

  • Size

    224KB

  • Sample

    241109-ts67hszrfp

  • MD5

    7b9dd2526c699cebb2993e4b2f88f67d

  • SHA1

    d685556c3647a68e8121468f60de49aa1e19d041

  • SHA256

    b31461f9481d6f3fcf5f8c75751c688c65d30435c232eac35ee75d5149b68a1d

  • SHA512

    61429dc9830570af17007ab40a1f16622a2a17dad41c101c7a30d32565cfa4ac14b61c973c4032079b20958cb1ec9879ddb19da9b4c059bebbd06f7618a1eccd

  • SSDEEP

    3072:BHOtjV5sX7LmcZWd9V/A7Hdsz+EHCSJPoMFqaF/dgsDsNRPFk5MY37rtFZ:BHuVOX7KcZW/hwHd07wWqIdgTGt

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      b31461f9481d6f3fcf5f8c75751c688c65d30435c232eac35ee75d5149b68a1d

    • Size

      224KB

    • MD5

      7b9dd2526c699cebb2993e4b2f88f67d

    • SHA1

      d685556c3647a68e8121468f60de49aa1e19d041

    • SHA256

      b31461f9481d6f3fcf5f8c75751c688c65d30435c232eac35ee75d5149b68a1d

    • SHA512

      61429dc9830570af17007ab40a1f16622a2a17dad41c101c7a30d32565cfa4ac14b61c973c4032079b20958cb1ec9879ddb19da9b4c059bebbd06f7618a1eccd

    • SSDEEP

      3072:BHOtjV5sX7LmcZWd9V/A7Hdsz+EHCSJPoMFqaF/dgsDsNRPFk5MY37rtFZ:BHuVOX7KcZW/hwHd07wWqIdgTGt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks