redline | 8e816cf3fdccea58b8878637d3c93933a28dc31559a5af8faf36500a62f0d44c

General

Target
x8e816cf3fdccea58b8878637d3c93933a28dc31559a5af8faf36500a62f0d44c.exe
Size 543KB
Sample260523-em2bracw3j
SHA256 8e816cf3fdccea58b8878637d3c93933a28dc31559a5af8faf36500a62f0d44c
MD5 de4806142cff64c3e77972585b84a10b
SHA1 561a67b6e343e0f145ce4092844372afa09492b8
SHA512 f5f8984a123c5b4b9b192ebef31ee9109d581947778d285e09c6d6ff7406a26d5a78d1b3cffc3686c7335bee111f10291bcc256cc5109f216abd86a8b8e50d6c
SSDEEP 12288:zyMSPzNWItNTdZTomh7QxKmF20HlZj4mG2puc:zyMSPzvHoJskvDG2puc
TLSH
T196C46BA2BFD18034E4A6C9B068638E91D728BD611F61818B75992BDF4E317C5DC3CB1B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

redline

Botnet

UTS

C2

45.9.20.20:13441

Targets

- Target
  x8e816cf3fdccea58b8878637d3c93933a28dc31559a5af8faf36500a62f0d44c.exe
- Size 543KB
- SHA256 8e816cf3fdccea58b8878637d3c93933a28dc31559a5af8faf36500a62f0d44c
- MD5 de4806142cff64c3e77972585b84a10b
- SHA1 561a67b6e343e0f145ce4092844372afa09492b8
- SHA512 f5f8984a123c5b4b9b192ebef31ee9109d581947778d285e09c6d6ff7406a26d5a78d1b3cffc3686c7335bee111f10291bcc256cc5109f216abd86a8b8e50d6c
- SSDEEP 12288:zyMSPzNWItNTdZTomh7QxKmF20HlZj4mG2puc:zyMSPzvHoJskvDG2puc
- TLSH
  T196C46BA2BFD18034E4A6C9B068638E91D728BD611F61818B75992BDF4E317C5DC3CB1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

uts discovery redline sectoprat infostealer rat trojan
- Family: RedLine
  RedLine Stealer is a malware family written in C#, first appearing in early 2020.
  infostealer redline
- Family: SectopRAT
  SectopRAT is a remote access trojan first seen in November 2019.
  trojan rat sectoprat
- RedLine payload
- SectopRAT payload
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Family: RedLine

Family: SectopRAT

RedLine payload

SectopRAT payload

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2