General

  • Target

    506910bea4144cc64099969bc1d298ca447cacb4ead52e3ecc68458f951b2bf5

  • Size

    360KB

  • Sample

    241110-q8lnzaxhpj

  • MD5

    f89cad49b0d97607c5b774994223395e

  • SHA1

    35659209b496463400273ebb65b053123c01ea3c

  • SHA256

    506910bea4144cc64099969bc1d298ca447cacb4ead52e3ecc68458f951b2bf5

  • SHA512

    f40be7b0f259e3e8a7b8923d549a0b66ddac2a7be3df25f166226834dd5c7826cd09bd05dc709ea49d69b7d0152484ddfab703ff032c72b8f2ca17f76d7b5859

  • SSDEEP

    6144:fnmgFQOWCbBALxnyFZwXKvqYNqpazNE6ddiCtVr6Uh:fnmgFQOWCbonnKvqYN3dldv

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      506910bea4144cc64099969bc1d298ca447cacb4ead52e3ecc68458f951b2bf5

    • Size

      360KB

    • MD5

      f89cad49b0d97607c5b774994223395e

    • SHA1

      35659209b496463400273ebb65b053123c01ea3c

    • SHA256

      506910bea4144cc64099969bc1d298ca447cacb4ead52e3ecc68458f951b2bf5

    • SHA512

      f40be7b0f259e3e8a7b8923d549a0b66ddac2a7be3df25f166226834dd5c7826cd09bd05dc709ea49d69b7d0152484ddfab703ff032c72b8f2ca17f76d7b5859

    • SSDEEP

      6144:fnmgFQOWCbBALxnyFZwXKvqYNqpazNE6ddiCtVr6Uh:fnmgFQOWCbonnKvqYN3dldv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks