General

  • Target

    24c975b3a3139f57d91a1e4e11547f1488d2359337af457bf26ffb2d18a06130

  • Size

    224KB

  • Sample

    241111-e6ft6ashjm

  • MD5

    7c034fbd75dfac33bff4d6ec20450669

  • SHA1

    863fdcefe48d9d4fb21285a38e77364a2e55eeeb

  • SHA256

    24c975b3a3139f57d91a1e4e11547f1488d2359337af457bf26ffb2d18a06130

  • SHA512

    52afbf9721975d7293287e39bcec82ce3fcaa50aff6eebd71deb32fa79b1f62a2ab66c091fd65f0dacd2b0399eb80ae15eb5d568382ce64c5e44a22a6296c501

  • SSDEEP

    3072:F466D6HreLv5nuvkahEo8oJZhwgGEQyboaBEZVVUOcgR4QM755PhO9c6:F4D6HivaHZhlohVPEZ/hO

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      24c975b3a3139f57d91a1e4e11547f1488d2359337af457bf26ffb2d18a06130

    • Size

      224KB

    • MD5

      7c034fbd75dfac33bff4d6ec20450669

    • SHA1

      863fdcefe48d9d4fb21285a38e77364a2e55eeeb

    • SHA256

      24c975b3a3139f57d91a1e4e11547f1488d2359337af457bf26ffb2d18a06130

    • SHA512

      52afbf9721975d7293287e39bcec82ce3fcaa50aff6eebd71deb32fa79b1f62a2ab66c091fd65f0dacd2b0399eb80ae15eb5d568382ce64c5e44a22a6296c501

    • SSDEEP

      3072:F466D6HreLv5nuvkahEo8oJZhwgGEQyboaBEZVVUOcgR4QM755PhO9c6:F4D6HivaHZhlohVPEZ/hO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks