General

  • Target

    7834c0c1475961e9b5aaca7e3634510f7ff5860baf58afe3f549e6227b33fa7f

  • Size

    409KB

  • Sample

    241111-mwajdsybpn

  • MD5

    325ff00a28424a380f0c1e24fbb2c23d

  • SHA1

    f77989e6642d6ead1a69ed077541f53a73c84b43

  • SHA256

    7834c0c1475961e9b5aaca7e3634510f7ff5860baf58afe3f549e6227b33fa7f

  • SHA512

    c5d2c56383a9269ebbba3e8d8de8ad7bd728f7af98a8b43713d1bd45241b8efa8f5f0cdb2ac4807ef23fde54e68653ef110fc00c3eb0cea4ac031e0522120d98

  • SSDEEP

    12288:1rHrmj8xwddY/BGrhpFb6gzkubBv7i/a:1jM8xOn2gIubB+y

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      7834c0c1475961e9b5aaca7e3634510f7ff5860baf58afe3f549e6227b33fa7f

    • Size

      409KB

    • MD5

      325ff00a28424a380f0c1e24fbb2c23d

    • SHA1

      f77989e6642d6ead1a69ed077541f53a73c84b43

    • SHA256

      7834c0c1475961e9b5aaca7e3634510f7ff5860baf58afe3f549e6227b33fa7f

    • SHA512

      c5d2c56383a9269ebbba3e8d8de8ad7bd728f7af98a8b43713d1bd45241b8efa8f5f0cdb2ac4807ef23fde54e68653ef110fc00c3eb0cea4ac031e0522120d98

    • SSDEEP

      12288:1rHrmj8xwddY/BGrhpFb6gzkubBv7i/a:1jM8xOn2gIubB+y

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks