General

  • Target

    0a00b4de22cc1e2a8e674359ee0eb3521b2a60f6e4538705a1123733e3dac64f

  • Size

    409KB

  • Sample

    241110-arldwavkey

  • MD5

    7fdd7a1e8a54483e66bb6c2b90338c5a

  • SHA1

    0262bbd61fb78b6867d92087de46101d02474052

  • SHA256

    0a00b4de22cc1e2a8e674359ee0eb3521b2a60f6e4538705a1123733e3dac64f

  • SHA512

    50aa9ab364e2308125e8c69487f336c507eb5a7fab5482a82b653263c2a7bdfac5eae27ab35ebf01d555b16b951aa356855bad05f6d7cf0a085ad7230782f4aa

  • SSDEEP

    6144:ACQ+quLsO63ylzQ4YpZ6i5L6C1TH/x/sNQffMiW1P80x6D1JEne/FMSN+Fzw:AZ+qu36ClEmar1rWNMEdR8Y6D120FM

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      0a00b4de22cc1e2a8e674359ee0eb3521b2a60f6e4538705a1123733e3dac64f

    • Size

      409KB

    • MD5

      7fdd7a1e8a54483e66bb6c2b90338c5a

    • SHA1

      0262bbd61fb78b6867d92087de46101d02474052

    • SHA256

      0a00b4de22cc1e2a8e674359ee0eb3521b2a60f6e4538705a1123733e3dac64f

    • SHA512

      50aa9ab364e2308125e8c69487f336c507eb5a7fab5482a82b653263c2a7bdfac5eae27ab35ebf01d555b16b951aa356855bad05f6d7cf0a085ad7230782f4aa

    • SSDEEP

      6144:ACQ+quLsO63ylzQ4YpZ6i5L6C1TH/x/sNQffMiW1P80x6D1JEne/FMSN+Fzw:AZ+qu36ClEmar1rWNMEdR8Y6D120FM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks