General

  • Target

    b65da83a8b0da462489ef422fac2e46a8b57539feb76fc63d9f8c7a016dd69ae

  • Size

    410KB

  • Sample

    241110-lry6hstmgs

  • MD5

    6a02f8bef09d2b0a49cc391327a3946f

  • SHA1

    28d2183331bd3114927824f30ae12ae1cb3d7ba1

  • SHA256

    b65da83a8b0da462489ef422fac2e46a8b57539feb76fc63d9f8c7a016dd69ae

  • SHA512

    470db5e40f150ca20a198584b943c6909387caf1846174707b76e6dee2cb0ac096ec80b9d3f0648f3ab4754094a48fc4d9f33ba136e16ce00ecbfa3719b01878

  • SSDEEP

    12288:MocjuMWp7X9saouKiWOUP1klg1dBybbzJVO:MBWp7tsaUdklaybbzPO

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      b65da83a8b0da462489ef422fac2e46a8b57539feb76fc63d9f8c7a016dd69ae

    • Size

      410KB

    • MD5

      6a02f8bef09d2b0a49cc391327a3946f

    • SHA1

      28d2183331bd3114927824f30ae12ae1cb3d7ba1

    • SHA256

      b65da83a8b0da462489ef422fac2e46a8b57539feb76fc63d9f8c7a016dd69ae

    • SHA512

      470db5e40f150ca20a198584b943c6909387caf1846174707b76e6dee2cb0ac096ec80b9d3f0648f3ab4754094a48fc4d9f33ba136e16ce00ecbfa3719b01878

    • SSDEEP

      12288:MocjuMWp7X9saouKiWOUP1klg1dBybbzJVO:MBWp7tsaUdklaybbzPO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks