General

  • Target

    30d7bb046210065d2f43da35dc6a385f7c5da15910a443849578d0158473ec0e

  • Size

    313KB

  • Sample

    241105-dmlevswjhm

  • MD5

    d2fe0acd8c595d6623c833a632cf39d9

  • SHA1

    d321c3af42356394e275c77db668d1a0f634a054

  • SHA256

    30d7bb046210065d2f43da35dc6a385f7c5da15910a443849578d0158473ec0e

  • SHA512

    b75fcecb021fd15ea6c41db08e7956f13d021f7630517adc62abcf228f4a3d0072214af4039159000bde2359b51232bc2cda5553ccc47a2e98a968fd70cf1554

  • SSDEEP

    6144:zuZQSd0apoMw1S2W3kN0PDxmYPWGZ2KrhM2Wi9Lu:aZJoMw1SON0LsEWCDrP/9Lu

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:18087

Targets

    • Target

      30d7bb046210065d2f43da35dc6a385f7c5da15910a443849578d0158473ec0e

    • Size

      313KB

    • MD5

      d2fe0acd8c595d6623c833a632cf39d9

    • SHA1

      d321c3af42356394e275c77db668d1a0f634a054

    • SHA256

      30d7bb046210065d2f43da35dc6a385f7c5da15910a443849578d0158473ec0e

    • SHA512

      b75fcecb021fd15ea6c41db08e7956f13d021f7630517adc62abcf228f4a3d0072214af4039159000bde2359b51232bc2cda5553ccc47a2e98a968fd70cf1554

    • SSDEEP

      6144:zuZQSd0apoMw1S2W3kN0PDxmYPWGZ2KrhM2Wi9Lu:aZJoMw1SON0LsEWCDrP/9Lu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks