General

  • Target

    30174d0b9329076a00375da771524ed7a07e4279d5e9c74c44ce58773a94e12c

  • Size

    359KB

  • Sample

    241110-j92y1stakq

  • MD5

    ea6803794ef77edf6d717dd637df47e5

  • SHA1

    1ed4baa854f4661bc43398c999bdc8d28c08f58b

  • SHA256

    30174d0b9329076a00375da771524ed7a07e4279d5e9c74c44ce58773a94e12c

  • SHA512

    916a518aaaa6141107bafcfd8375e06667b2f0de7744be31a26c889366296ae2a6e1af61131ac9ac5792a13c6bfdb14f7d124d0c9061bc7dcf27105e79294069

  • SSDEEP

    6144:u27s7DsJ1/QBjbPs1yaoZvQwRu93ZSJ+1xePx:u27s7DU1/absGZou0C+1IPx

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      30174d0b9329076a00375da771524ed7a07e4279d5e9c74c44ce58773a94e12c

    • Size

      359KB

    • MD5

      ea6803794ef77edf6d717dd637df47e5

    • SHA1

      1ed4baa854f4661bc43398c999bdc8d28c08f58b

    • SHA256

      30174d0b9329076a00375da771524ed7a07e4279d5e9c74c44ce58773a94e12c

    • SHA512

      916a518aaaa6141107bafcfd8375e06667b2f0de7744be31a26c889366296ae2a6e1af61131ac9ac5792a13c6bfdb14f7d124d0c9061bc7dcf27105e79294069

    • SSDEEP

      6144:u27s7DsJ1/QBjbPs1yaoZvQwRu93ZSJ+1xePx:u27s7DU1/absGZou0C+1IPx

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks