General

  • Target

    eb134a0c47f68081f05e1401d1cdd82e65f66564cae336891ea41745d3ea556d

  • Size

    380KB

  • Sample

    241111-lf2r9sxfmg

  • MD5

    482b28f9542342b258a62133aab89419

  • SHA1

    94795086ca06b9b5bc10ef93fccf0b6dc046f017

  • SHA256

    eb134a0c47f68081f05e1401d1cdd82e65f66564cae336891ea41745d3ea556d

  • SHA512

    727320893e1d4943cc1c1fd862f7636188831ed45cafcd114e591edd2a8e378dd1f73570990d050f10fcb015b13aa0b2825db5dd1cb79b6c1cf3970fd0eea817

  • SSDEEP

    6144:W8A/nXkVIfP5halyFvlNGcRvwHCjHCB5M+RRS5QqIsRJOFZ:6/nXkVIn5iy1GcRAIg525vuZ

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      eb134a0c47f68081f05e1401d1cdd82e65f66564cae336891ea41745d3ea556d

    • Size

      380KB

    • MD5

      482b28f9542342b258a62133aab89419

    • SHA1

      94795086ca06b9b5bc10ef93fccf0b6dc046f017

    • SHA256

      eb134a0c47f68081f05e1401d1cdd82e65f66564cae336891ea41745d3ea556d

    • SHA512

      727320893e1d4943cc1c1fd862f7636188831ed45cafcd114e591edd2a8e378dd1f73570990d050f10fcb015b13aa0b2825db5dd1cb79b6c1cf3970fd0eea817

    • SSDEEP

      6144:W8A/nXkVIfP5halyFvlNGcRvwHCjHCB5M+RRS5QqIsRJOFZ:6/nXkVIn5iy1GcRAIg525vuZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks