General

  • Target

    7a32fb3a43432cd0f99baecba36852c56d839ef9f42c40387be002c51bb52e09

  • Size

    292KB

  • Sample

    241110-zct5xaxpdm

  • MD5

    96926cc7a6de20070169c6992719475d

  • SHA1

    2a023c95ccfa3cc1208da5e426fb72cc0ae8ffb7

  • SHA256

    7a32fb3a43432cd0f99baecba36852c56d839ef9f42c40387be002c51bb52e09

  • SHA512

    51e23d543b79b9871d525168aace30f4571b66b9905b66be534f2507120034199696866bd6303ea81c118566718a61b449d9f61c3a336c2f78a50eaa8b4549f9

  • SSDEEP

    6144:rnTZvL7SH5CkCl4HUdJDWR2sazw6hY/CshnWZM/L6j:ntfSH5RCeHUw7F6C/CshnW

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      7a32fb3a43432cd0f99baecba36852c56d839ef9f42c40387be002c51bb52e09

    • Size

      292KB

    • MD5

      96926cc7a6de20070169c6992719475d

    • SHA1

      2a023c95ccfa3cc1208da5e426fb72cc0ae8ffb7

    • SHA256

      7a32fb3a43432cd0f99baecba36852c56d839ef9f42c40387be002c51bb52e09

    • SHA512

      51e23d543b79b9871d525168aace30f4571b66b9905b66be534f2507120034199696866bd6303ea81c118566718a61b449d9f61c3a336c2f78a50eaa8b4549f9

    • SSDEEP

      6144:rnTZvL7SH5CkCl4HUdJDWR2sazw6hY/CshnWZM/L6j:ntfSH5RCeHUw7F6C/CshnW

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks