General

  • Target

    2bd7fc4cee47f0927f38ffa1af4cd43278d288a902e3e44df3adea1e5983c742.exe

  • Size

    337KB

  • Sample

    241123-wk5d3avrcr

  • MD5

    662dc75386a607cf1acd1d32ce5f9b8d

  • SHA1

    93e428159e6138cbcd30507db1953db42738f586

  • SHA256

    2bd7fc4cee47f0927f38ffa1af4cd43278d288a902e3e44df3adea1e5983c742

  • SHA512

    d7b13cd2cbb64f133c88059f75ed35fc118bc1a36b0e98fd7b72516859ecbfa85b3cef478a4e5f47769dc0d28c44ea27d233e5831fc42cf1acfd61ca04da1e6d

  • SSDEEP

    6144:Hk7I0vqssEZpb6oSD6T/XmHas4Us6U4cVgNZJIYIADG8elf:Ec0vVsEbqDYX8as48UrIxDw

Malware Config

Extracted

Family

redline

Botnet

PUB

C2

45.9.20.182:52236

Attributes
  • auth_value

    a272f3a2850ec3dccdaed97234b7c40e

Targets

    • Target

      2bd7fc4cee47f0927f38ffa1af4cd43278d288a902e3e44df3adea1e5983c742.exe

    • Size

      337KB

    • MD5

      662dc75386a607cf1acd1d32ce5f9b8d

    • SHA1

      93e428159e6138cbcd30507db1953db42738f586

    • SHA256

      2bd7fc4cee47f0927f38ffa1af4cd43278d288a902e3e44df3adea1e5983c742

    • SHA512

      d7b13cd2cbb64f133c88059f75ed35fc118bc1a36b0e98fd7b72516859ecbfa85b3cef478a4e5f47769dc0d28c44ea27d233e5831fc42cf1acfd61ca04da1e6d

    • SSDEEP

      6144:Hk7I0vqssEZpb6oSD6T/XmHas4Us6U4cVgNZJIYIADG8elf:Ec0vVsEbqDYX8as48UrIxDw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks