General

  • Target

    82405fd369bbacde7be13243e8ec74554f8c5aa2246e4d49231016ff749a00cf

  • Size

    361KB

  • Sample

    241109-y6erms1glq

  • MD5

    5578fff4fc010d8f14212b8820b9845f

  • SHA1

    fb2268f9eb2802cbc952280ca88335376935b1e6

  • SHA256

    82405fd369bbacde7be13243e8ec74554f8c5aa2246e4d49231016ff749a00cf

  • SHA512

    53749e4a788e311b24dbd90a8527e5f8d158049ce619e5571252133d5caaf97120f0e2312d7da278360bb52247c12213a0f5407e19061032f5c5067eafb4e88d

  • SSDEEP

    6144:0V+6pYjwMliC9/U0/GbP7EYSVy0Re0EcEiUwy:0V+62jwMlj/CTf0E

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      82405fd369bbacde7be13243e8ec74554f8c5aa2246e4d49231016ff749a00cf

    • Size

      361KB

    • MD5

      5578fff4fc010d8f14212b8820b9845f

    • SHA1

      fb2268f9eb2802cbc952280ca88335376935b1e6

    • SHA256

      82405fd369bbacde7be13243e8ec74554f8c5aa2246e4d49231016ff749a00cf

    • SHA512

      53749e4a788e311b24dbd90a8527e5f8d158049ce619e5571252133d5caaf97120f0e2312d7da278360bb52247c12213a0f5407e19061032f5c5067eafb4e88d

    • SSDEEP

      6144:0V+6pYjwMliC9/U0/GbP7EYSVy0Re0EcEiUwy:0V+62jwMlj/CTf0E

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks