General

  • Target

    7f29c92de22f999107fe997594779878f48327827654de1c079fab0387a1ab67

  • Size

    409KB

  • Sample

    241111-kkn7asznen

  • MD5

    899b7c1c860f87c9df7e660e00aed866

  • SHA1

    c2c836127957058e910b5811d89d18baed13ec82

  • SHA256

    7f29c92de22f999107fe997594779878f48327827654de1c079fab0387a1ab67

  • SHA512

    f956652787cd7af0c3baa0418ebe64ceb2707555271d15097eba0d3465dd3e6fe0f02106a14f4e6e92b38a1a11ecf2fca6ccc57c51f9c0e8ab34975d4aecd90a

  • SSDEEP

    12288:K4u2io/EjoYENuL69AUaqWiFrnUuKd9fL0yPIn:bBVEjEAHwzUnfLNw

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      7f29c92de22f999107fe997594779878f48327827654de1c079fab0387a1ab67

    • Size

      409KB

    • MD5

      899b7c1c860f87c9df7e660e00aed866

    • SHA1

      c2c836127957058e910b5811d89d18baed13ec82

    • SHA256

      7f29c92de22f999107fe997594779878f48327827654de1c079fab0387a1ab67

    • SHA512

      f956652787cd7af0c3baa0418ebe64ceb2707555271d15097eba0d3465dd3e6fe0f02106a14f4e6e92b38a1a11ecf2fca6ccc57c51f9c0e8ab34975d4aecd90a

    • SSDEEP

      12288:K4u2io/EjoYENuL69AUaqWiFrnUuKd9fL0yPIn:bBVEjEAHwzUnfLNw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks