General
-
Target
https://gofile.io/d/SRT9tP
-
Sample
240704-tmx2na1dne
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
s6murai on telegram
C2
178.40.160.213:3333
Targets
-
-
Target
https://gofile.io/d/SRT9tP
Score10/10-
RedLine
RedLine Stealer is a malware family written in C#, first appearing in early 2020.
-
RedLine payload
-
SectopRAT
SectopRAT is a remote access trojan first seen in November 2019.
-
SectopRAT payload
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-