General

  • Target

    26c8d7dc66ddd5d748f932e03daaf005672b87eacde860bf36ae6d36c9646188

  • Size

    318KB

  • Sample

    241110-schcsayfpk

  • MD5

    e63568e8efd70c235cda7a12a67b5f06

  • SHA1

    58748f7c2abfa55cb5e894838afe7da5cad76348

  • SHA256

    26c8d7dc66ddd5d748f932e03daaf005672b87eacde860bf36ae6d36c9646188

  • SHA512

    407991cf19ae1a1f2f42f5b10417d37d7677a7051b666df2f1181732bbf435bd1c038bd45f25a0a03b755853cad30485dce4c037a1796b5457c98184308eac72

  • SSDEEP

    6144:YCp4LXhCQewQ4Q5EyUbs8n7pfIZO3D5yNK3WkoO+ve+qmkLbgO:4LhCQev4QPUbZpfiElAK3WpOn3g

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      26c8d7dc66ddd5d748f932e03daaf005672b87eacde860bf36ae6d36c9646188

    • Size

      318KB

    • MD5

      e63568e8efd70c235cda7a12a67b5f06

    • SHA1

      58748f7c2abfa55cb5e894838afe7da5cad76348

    • SHA256

      26c8d7dc66ddd5d748f932e03daaf005672b87eacde860bf36ae6d36c9646188

    • SHA512

      407991cf19ae1a1f2f42f5b10417d37d7677a7051b666df2f1181732bbf435bd1c038bd45f25a0a03b755853cad30485dce4c037a1796b5457c98184308eac72

    • SSDEEP

      6144:YCp4LXhCQewQ4Q5EyUbs8n7pfIZO3D5yNK3WkoO+ve+qmkLbgO:4LhCQev4QPUbZpfiElAK3WpOn3g

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks