General

  • Target

    f8d1554d35d8f424077e4421f8258a0a108bfbfbea97a8538a51daf1ae17d90c

  • Size

    389KB

  • Sample

    241110-px7avswne1

  • MD5

    5120a04303924786d9be854ca08b9737

  • SHA1

    d4f90429dc8abcaf08a08ed4dd78d78b4c985801

  • SHA256

    f8d1554d35d8f424077e4421f8258a0a108bfbfbea97a8538a51daf1ae17d90c

  • SHA512

    f1e94a14471e16196f87f900a541372b1b3850fa010afff75028e1e71d4cbb9d814eed0c80821cfb84700170e8d2b9520376116c080ebddb550b8e0a6ee2559f

  • SSDEEP

    6144:RKzT8E8XvLSZrhU2u+nB4RxSIxQ4x8yjfmDFJnhxQo1IZL6MCOhxxFeTr/ekI:HuZrhUx+nBkxB61F1SL6+zxF6L

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      f8d1554d35d8f424077e4421f8258a0a108bfbfbea97a8538a51daf1ae17d90c

    • Size

      389KB

    • MD5

      5120a04303924786d9be854ca08b9737

    • SHA1

      d4f90429dc8abcaf08a08ed4dd78d78b4c985801

    • SHA256

      f8d1554d35d8f424077e4421f8258a0a108bfbfbea97a8538a51daf1ae17d90c

    • SHA512

      f1e94a14471e16196f87f900a541372b1b3850fa010afff75028e1e71d4cbb9d814eed0c80821cfb84700170e8d2b9520376116c080ebddb550b8e0a6ee2559f

    • SSDEEP

      6144:RKzT8E8XvLSZrhU2u+nB4RxSIxQ4x8yjfmDFJnhxQo1IZL6MCOhxxFeTr/ekI:HuZrhUx+nBkxB61F1SL6+zxF6L

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks