General

  • Target

    9a1bbd3f7bea30004030456d6336bd3658254a1fcf1b037796f6edeafa7ca7b7

  • Size

    292KB

  • Sample

    241111-bq4phayhkr

  • MD5

    1e488fe0926ec405011cff54e9c973c9

  • SHA1

    5099aec8aad2e35fd060c521f7e3ea90a410a576

  • SHA256

    9a1bbd3f7bea30004030456d6336bd3658254a1fcf1b037796f6edeafa7ca7b7

  • SHA512

    c1a3d359afdb6a09b0b07b1ccaedc4bb42b1b389a5a3176ce9478379339203a163d90f5003681a32d40eba1246cba7adb734b56f8c0bea4aa97c1e8729243b77

  • SSDEEP

    6144:rnTZvL7SH5YoyFdzV3fmHzTCElQheGfZgtim7Srs/h3nWhQ:ntfSH5cZV8Tnl8Jtm7Sre

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      9a1bbd3f7bea30004030456d6336bd3658254a1fcf1b037796f6edeafa7ca7b7

    • Size

      292KB

    • MD5

      1e488fe0926ec405011cff54e9c973c9

    • SHA1

      5099aec8aad2e35fd060c521f7e3ea90a410a576

    • SHA256

      9a1bbd3f7bea30004030456d6336bd3658254a1fcf1b037796f6edeafa7ca7b7

    • SHA512

      c1a3d359afdb6a09b0b07b1ccaedc4bb42b1b389a5a3176ce9478379339203a163d90f5003681a32d40eba1246cba7adb734b56f8c0bea4aa97c1e8729243b77

    • SSDEEP

      6144:rnTZvL7SH5YoyFdzV3fmHzTCElQheGfZgtim7Srs/h3nWhQ:ntfSH5cZV8Tnl8Jtm7Sre

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks