General

  • Target

    e2752c1feca5012390b336bff1f1c3ac91c9c91389a43ec02a78a53b7d1226ee

  • Size

    253KB

  • Sample

    241111-lyz2ds1mal

  • MD5

    22fdfa2192e2d9687b10af07172426e0

  • SHA1

    80faa8f17a2b4b160d4ff1166ddc228c993a4f91

  • SHA256

    e2752c1feca5012390b336bff1f1c3ac91c9c91389a43ec02a78a53b7d1226ee

  • SHA512

    264e709173954a500a017a0cac7841e3e40d08cdb6b87a1a57f00f0b02fa61575a0ecb7ed5f6b266d03ae822b7b2e829726929c8727b8818d2f4816b6caa64de

  • SSDEEP

    6144:ODBVaJ9rw/P4bskmV3SvtL33t1j4acTbd:ODaJM4bBm0vhH4aObd

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.20:13441

Targets

    • Target

      e2752c1feca5012390b336bff1f1c3ac91c9c91389a43ec02a78a53b7d1226ee

    • Size

      253KB

    • MD5

      22fdfa2192e2d9687b10af07172426e0

    • SHA1

      80faa8f17a2b4b160d4ff1166ddc228c993a4f91

    • SHA256

      e2752c1feca5012390b336bff1f1c3ac91c9c91389a43ec02a78a53b7d1226ee

    • SHA512

      264e709173954a500a017a0cac7841e3e40d08cdb6b87a1a57f00f0b02fa61575a0ecb7ed5f6b266d03ae822b7b2e829726929c8727b8818d2f4816b6caa64de

    • SSDEEP

      6144:ODBVaJ9rw/P4bskmV3SvtL33t1j4acTbd:ODaJM4bBm0vhH4aObd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks