General

  • Target

    bb7db6bca553843768359ac76a31ad1296c33961ceb5e171bd183a51bd4c77cc

  • Size

    359KB

  • Sample

    241110-z61vjsvglj

  • MD5

    43790b90989995a81538754eafc0e114

  • SHA1

    a64e5c7d636ee5f29961c046e0871e371c5d20ca

  • SHA256

    bb7db6bca553843768359ac76a31ad1296c33961ceb5e171bd183a51bd4c77cc

  • SHA512

    28efcd5f439043e051a5ecfdfc85b25e6425147f63875dcef7cd3f910dd2c797ef2649e85736abca1fc0173f1acdc69ad7261273c9b0a04ebb75020de7e98f20

  • SSDEEP

    6144:ighccEyHTzpA+5DUzYJv35gdma2XvQuoGmEMqkVLSU:ighZEyHfpVgcxp8ma23oGXMNVLd

Malware Config

Extracted

Family

redline

Botnet

UDP

C2

45.9.20.20:13441

Targets

    • Target

      bb7db6bca553843768359ac76a31ad1296c33961ceb5e171bd183a51bd4c77cc

    • Size

      359KB

    • MD5

      43790b90989995a81538754eafc0e114

    • SHA1

      a64e5c7d636ee5f29961c046e0871e371c5d20ca

    • SHA256

      bb7db6bca553843768359ac76a31ad1296c33961ceb5e171bd183a51bd4c77cc

    • SHA512

      28efcd5f439043e051a5ecfdfc85b25e6425147f63875dcef7cd3f910dd2c797ef2649e85736abca1fc0173f1acdc69ad7261273c9b0a04ebb75020de7e98f20

    • SSDEEP

      6144:ighccEyHTzpA+5DUzYJv35gdma2XvQuoGmEMqkVLSU:ighZEyHfpVgcxp8ma23oGXMNVLd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks