General

  • Target

    6a7a039915680faeaed2649ceb4f8249a6c51e2c52d1ff4cb1d0f0bf58433a21

  • Size

    396KB

  • Sample

    241111-mewejaxhkk

  • MD5

    91393b666e8d631e848fa2339e0d4994

  • SHA1

    bf087ce1e59a06b6e3168d2d05cd006e2baa44aa

  • SHA256

    6a7a039915680faeaed2649ceb4f8249a6c51e2c52d1ff4cb1d0f0bf58433a21

  • SHA512

    f6f66ea83fb25fc16e33d5c24645d10e62754ce6c53df4e336fb2d646b976536cffb518b124016c64b6299ded16de655d2092fb2d72a6c0af1fa903ac434af0b

  • SSDEEP

    6144:jYXXiMFsORMIYpomSwlxCEjMmfTpUB76J7Ny34j864CF1/:GXfFrRMjomxltjTtUBo7Ny3Mn

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

    • Target

      6a7a039915680faeaed2649ceb4f8249a6c51e2c52d1ff4cb1d0f0bf58433a21

    • Size

      396KB

    • MD5

      91393b666e8d631e848fa2339e0d4994

    • SHA1

      bf087ce1e59a06b6e3168d2d05cd006e2baa44aa

    • SHA256

      6a7a039915680faeaed2649ceb4f8249a6c51e2c52d1ff4cb1d0f0bf58433a21

    • SHA512

      f6f66ea83fb25fc16e33d5c24645d10e62754ce6c53df4e336fb2d646b976536cffb518b124016c64b6299ded16de655d2092fb2d72a6c0af1fa903ac434af0b

    • SSDEEP

      6144:jYXXiMFsORMIYpomSwlxCEjMmfTpUB76J7Ny34j864CF1/:GXfFrRMjomxltjTtUBo7Ny3Mn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks