General

  • Target

    e162c336769fb894b76346cb71d0e2db53e76a53e8996d56b847593785bf6927

  • Size

    345KB

  • Sample

    241110-qj1ftszrgk

  • MD5

    201a3032f6f7aee93111f10a76b6a78d

  • SHA1

    54b151fca2b5e14ff0ea68395dfd470f97885098

  • SHA256

    e162c336769fb894b76346cb71d0e2db53e76a53e8996d56b847593785bf6927

  • SHA512

    fe4ac3a849dda34b1b75d1074663d2113837223d2e1447d90433d762bdf4ba36c5866ff41221cb403b8b1183e7c44a9cd75c2ea02dca65ead9bcc64950d2da3d

  • SSDEEP

    6144:IgrfeeSsAckLVemgCtlH1zBha6r4lShpKjA8BtKEEcZt0RZU6pSv:X5SsAckL9vthrha61hpXgBCZnp

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      e162c336769fb894b76346cb71d0e2db53e76a53e8996d56b847593785bf6927

    • Size

      345KB

    • MD5

      201a3032f6f7aee93111f10a76b6a78d

    • SHA1

      54b151fca2b5e14ff0ea68395dfd470f97885098

    • SHA256

      e162c336769fb894b76346cb71d0e2db53e76a53e8996d56b847593785bf6927

    • SHA512

      fe4ac3a849dda34b1b75d1074663d2113837223d2e1447d90433d762bdf4ba36c5866ff41221cb403b8b1183e7c44a9cd75c2ea02dca65ead9bcc64950d2da3d

    • SSDEEP

      6144:IgrfeeSsAckLVemgCtlH1zBha6r4lShpKjA8BtKEEcZt0RZU6pSv:X5SsAckL9vthrha61hpXgBCZnp

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks