General

  • Target

    75f0eb66287bcef5672d46311c58c3112c46cacbe31f2f895fa9d9510b150d81

  • Size

    360KB

  • Sample

    241111-j7wn8avqgt

  • MD5

    cecc7b5c8966722ef18da266b13b25bb

  • SHA1

    6027f21de345a73a07946e759da7b313b92d1e39

  • SHA256

    75f0eb66287bcef5672d46311c58c3112c46cacbe31f2f895fa9d9510b150d81

  • SHA512

    d96f8690a33f4367cabf46f2b9d60c7017699c3e2afe5b5876a1ec6c398770e841d8db6e7afcbdc9ea2e9bd707a7d12c7277c1a18b71b1501721fdc14d0b476c

  • SSDEEP

    6144:KwERCPD4N1/0BbU+aL1yJFmouIDBwlUU1RkrFc7js:KfRCPDs1/GU70vT/DqCrFc7Q

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      75f0eb66287bcef5672d46311c58c3112c46cacbe31f2f895fa9d9510b150d81

    • Size

      360KB

    • MD5

      cecc7b5c8966722ef18da266b13b25bb

    • SHA1

      6027f21de345a73a07946e759da7b313b92d1e39

    • SHA256

      75f0eb66287bcef5672d46311c58c3112c46cacbe31f2f895fa9d9510b150d81

    • SHA512

      d96f8690a33f4367cabf46f2b9d60c7017699c3e2afe5b5876a1ec6c398770e841d8db6e7afcbdc9ea2e9bd707a7d12c7277c1a18b71b1501721fdc14d0b476c

    • SSDEEP

      6144:KwERCPD4N1/0BbU+aL1yJFmouIDBwlUU1RkrFc7js:KfRCPDs1/GU70vT/DqCrFc7Q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks