General

  • Target

    7814c1b267ebc06208e8c71e27c44f96014a675b86b7dead86669c98ad7fdc80

  • Size

    248KB

  • Sample

    241105-k58rfayhln

  • MD5

    14b52c228bcd7a248e202e51611c1a03

  • SHA1

    0e86044ed1c946672ec97078a2eabdd57d3a764b

  • SHA256

    7814c1b267ebc06208e8c71e27c44f96014a675b86b7dead86669c98ad7fdc80

  • SHA512

    87c789d415afb624d7c7d0c68c1ba1f95a0abde1a1009cc6e7bceaa37a59784b235e1e1c8d2a0f27adb63f9bf88e7908208088ecc92462679455fd8d6cbd451a

  • SSDEEP

    6144:zZXpRHwZDrlmvG2+NNc4Jajad17KHV89T8:dXpRHwZVeN+Ni4JaOKVUT

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      7814c1b267ebc06208e8c71e27c44f96014a675b86b7dead86669c98ad7fdc80

    • Size

      248KB

    • MD5

      14b52c228bcd7a248e202e51611c1a03

    • SHA1

      0e86044ed1c946672ec97078a2eabdd57d3a764b

    • SHA256

      7814c1b267ebc06208e8c71e27c44f96014a675b86b7dead86669c98ad7fdc80

    • SHA512

      87c789d415afb624d7c7d0c68c1ba1f95a0abde1a1009cc6e7bceaa37a59784b235e1e1c8d2a0f27adb63f9bf88e7908208088ecc92462679455fd8d6cbd451a

    • SSDEEP

      6144:zZXpRHwZDrlmvG2+NNc4Jajad17KHV89T8:dXpRHwZVeN+Ni4JaOKVUT

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks