General

  • Target

    42e678e2d49ed1f70a4531c50e76ef18b48dfd91758e1bb352294ced3136c069

  • Size

    257KB

  • Sample

    241109-v1w7ysyepa

  • MD5

    7cb6b7f1224e9e5fa7ee84f2d6b95bfb

  • SHA1

    f402d11cfb544d32bc060bff79b7a6b70a03bb7f

  • SHA256

    42e678e2d49ed1f70a4531c50e76ef18b48dfd91758e1bb352294ced3136c069

  • SHA512

    3f6e3fffc3c85003b73db11b4289f9abd5a69fa036c0f7b141dc668106e0ff9436c5727cd708c5fb5f5353e2645f9e890b0343febda1917bfa470d70bbd31ab6

  • SSDEEP

    3072:vCYfK8aujBXzQ9Y7UNVK7TozKaIFWa1KIA731a3aOedlV1Ms9FPAr51FObo6I/u:vltBE9Y7UqHozKfwda3aOevV1T9KAIW

Malware Config

Extracted

Family

redline

Botnet

Cryptor

C2

95.181.172.207:56916

Targets

    • Target

      42e678e2d49ed1f70a4531c50e76ef18b48dfd91758e1bb352294ced3136c069

    • Size

      257KB

    • MD5

      7cb6b7f1224e9e5fa7ee84f2d6b95bfb

    • SHA1

      f402d11cfb544d32bc060bff79b7a6b70a03bb7f

    • SHA256

      42e678e2d49ed1f70a4531c50e76ef18b48dfd91758e1bb352294ced3136c069

    • SHA512

      3f6e3fffc3c85003b73db11b4289f9abd5a69fa036c0f7b141dc668106e0ff9436c5727cd708c5fb5f5353e2645f9e890b0343febda1917bfa470d70bbd31ab6

    • SSDEEP

      3072:vCYfK8aujBXzQ9Y7UNVK7TozKaIFWa1KIA731a3aOedlV1Ms9FPAr51FObo6I/u:vltBE9Y7UqHozKfwda3aOevV1T9KAIW

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks