General

  • Target

    3e8e1c6660fa58395f7f72c71ca1e37e90710526457c220fca08964a0dd5c759

  • Size

    315KB

  • Sample

    241110-hz3xws1pgv

  • MD5

    6b5feedfb5bdbf196a8d96b4dab0a1ac

  • SHA1

    98a8630c28f0e46a218affe6eaa42831321bfe46

  • SHA256

    3e8e1c6660fa58395f7f72c71ca1e37e90710526457c220fca08964a0dd5c759

  • SHA512

    6b41b62792ab6b0ad8f8e45785f4c5ed7a0d222827b662a283e150b92f6c1fa9999ae52c09a13c9134fb668461efdd07ae0af332c380f08b224d3f61e10648da

  • SSDEEP

    6144:fXHIiSvtyv3ZlH5cWO81VBjSQhQvUd8O3:fXHIiSMv37K581PWQhD8

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      3e8e1c6660fa58395f7f72c71ca1e37e90710526457c220fca08964a0dd5c759

    • Size

      315KB

    • MD5

      6b5feedfb5bdbf196a8d96b4dab0a1ac

    • SHA1

      98a8630c28f0e46a218affe6eaa42831321bfe46

    • SHA256

      3e8e1c6660fa58395f7f72c71ca1e37e90710526457c220fca08964a0dd5c759

    • SHA512

      6b41b62792ab6b0ad8f8e45785f4c5ed7a0d222827b662a283e150b92f6c1fa9999ae52c09a13c9134fb668461efdd07ae0af332c380f08b224d3f61e10648da

    • SSDEEP

      6144:fXHIiSvtyv3ZlH5cWO81VBjSQhQvUd8O3:fXHIiSMv37K581PWQhD8

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks