General

  • Target

    5a794ebe3545db430ad24de819665cd3f2ebbce51bfdae26e3718844d4acb570

  • Size

    412KB

  • Sample

    241110-jtdaqawkfn

  • MD5

    0ce6248bd6dfcefc6b173acd2ba64f8d

  • SHA1

    2bd2bceb5d52a885b45f294b2680b4927f39693a

  • SHA256

    5a794ebe3545db430ad24de819665cd3f2ebbce51bfdae26e3718844d4acb570

  • SHA512

    64c57ff48741453b0e4204c7d8a3f20433c46485070c785227ef771aa3c3e766a7b7ef9ad5aa727aae1a9600acb70eb7a2428f3c898814de89aca373e4d24eb7

  • SSDEEP

    6144:rHCKKXSPxV80I6JJ+5VP9TIBirwaoyFOZP/HaYLCdzQvVIIbpTr0:DCzXSZCaJ+ZEfahUZP/aYLKQvVIIVf

Malware Config

Extracted

Family

redline

Botnet

money

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Targets

    • Target

      5a794ebe3545db430ad24de819665cd3f2ebbce51bfdae26e3718844d4acb570

    • Size

      412KB

    • MD5

      0ce6248bd6dfcefc6b173acd2ba64f8d

    • SHA1

      2bd2bceb5d52a885b45f294b2680b4927f39693a

    • SHA256

      5a794ebe3545db430ad24de819665cd3f2ebbce51bfdae26e3718844d4acb570

    • SHA512

      64c57ff48741453b0e4204c7d8a3f20433c46485070c785227ef771aa3c3e766a7b7ef9ad5aa727aae1a9600acb70eb7a2428f3c898814de89aca373e4d24eb7

    • SSDEEP

      6144:rHCKKXSPxV80I6JJ+5VP9TIBirwaoyFOZP/HaYLCdzQvVIIbpTr0:DCzXSZCaJ+ZEfahUZP/aYLKQvVIIVf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks