General

  • Target

    12abfe88e3f6e6104993063130279a790fbb26f6f8737428445aa47bbe26496b

  • Size

    95KB

  • Sample

    241111-glcywatgpr

  • MD5

    0e141953b88b275c2d5361a45294b3d1

  • SHA1

    cf7b272cd6ad3fbc4684aecae184595f2f23ce05

  • SHA256

    12abfe88e3f6e6104993063130279a790fbb26f6f8737428445aa47bbe26496b

  • SHA512

    023009aac8e4e650b8f23f41a9650c253450ab6f84ec2db408ea431c119e09cc7b3b4a73627e14269920d540a6e16139cbe0ddac29ab0e94eacf2ca2818530bf

  • SSDEEP

    1536:Fqsgaq+A/lbG6jejoigIP43Ywzi0Zb78ivombfexv0ujXyyed273teulgS6pQl:DfZeYP+zi0ZbYe1g0ujyzdXQ

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

soon-lp.at.ply.gg:17209

Targets

    • Target

      12abfe88e3f6e6104993063130279a790fbb26f6f8737428445aa47bbe26496b

    • Size

      95KB

    • MD5

      0e141953b88b275c2d5361a45294b3d1

    • SHA1

      cf7b272cd6ad3fbc4684aecae184595f2f23ce05

    • SHA256

      12abfe88e3f6e6104993063130279a790fbb26f6f8737428445aa47bbe26496b

    • SHA512

      023009aac8e4e650b8f23f41a9650c253450ab6f84ec2db408ea431c119e09cc7b3b4a73627e14269920d540a6e16139cbe0ddac29ab0e94eacf2ca2818530bf

    • SSDEEP

      1536:Fqsgaq+A/lbG6jejoigIP43Ywzi0Zb78ivombfexv0ujXyyed273teulgS6pQl:DfZeYP+zi0ZbYe1g0ujyzdXQ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks