General

  • Target

    4f406f82402e5ba6578748764cea4a7fad9df5997bf2d6d3f5e06abe98a37307

  • Size

    407KB

  • Sample

    241105-flr75avjdt

  • MD5

    15a0268434194d660f07e5f7a40fee05

  • SHA1

    aacb160186e7c390935537460a2175600dab3af4

  • SHA256

    4f406f82402e5ba6578748764cea4a7fad9df5997bf2d6d3f5e06abe98a37307

  • SHA512

    094e68e49e31e158f081d5399d641954c22c035d055c677eb7ebc601dff6d376467dba1d2bf6dca9b089f03e8d9341e5194334971ac527b4162dfa57b72291e4

  • SSDEEP

    6144:SLKEDp3bUzNWBUGE4kkgTxA5en9SXYyno90XFe1FIwO0aF:7EV3bUzNGUGFgTE5rFeLa0O

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      4f406f82402e5ba6578748764cea4a7fad9df5997bf2d6d3f5e06abe98a37307

    • Size

      407KB

    • MD5

      15a0268434194d660f07e5f7a40fee05

    • SHA1

      aacb160186e7c390935537460a2175600dab3af4

    • SHA256

      4f406f82402e5ba6578748764cea4a7fad9df5997bf2d6d3f5e06abe98a37307

    • SHA512

      094e68e49e31e158f081d5399d641954c22c035d055c677eb7ebc601dff6d376467dba1d2bf6dca9b089f03e8d9341e5194334971ac527b4162dfa57b72291e4

    • SSDEEP

      6144:SLKEDp3bUzNWBUGE4kkgTxA5en9SXYyno90XFe1FIwO0aF:7EV3bUzNGUGFgTE5rFeLa0O

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks