General

  • Target

    f6403a6a0f3ddbc8d3d0b0917ee35169d7e6e970027eeb018abe84a830de21f7

  • Size

    248KB

  • Sample

    241105-lx4m7aykbz

  • MD5

    e87153fa818be61392130273f914e6ac

  • SHA1

    c3035f23d3943e91fba1a10e3c1fd0c535ed34fc

  • SHA256

    f6403a6a0f3ddbc8d3d0b0917ee35169d7e6e970027eeb018abe84a830de21f7

  • SHA512

    d5db9ad89cb4f41830dc0d027ed65bf14c942f615e496ea4d04f9554531bd2f4f22485eeede4632600b49738de827916326f7a2c869a6e2621ab275a258f515c

  • SSDEEP

    3072:i6afyjtmn9s6vYJVzWjRj7opcNCfWnsApYi1Cv+rCoYHUmWKvzk5NruDMKQdV:En9stVUjNCdmCv+rCUmWRraQdV

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      f6403a6a0f3ddbc8d3d0b0917ee35169d7e6e970027eeb018abe84a830de21f7

    • Size

      248KB

    • MD5

      e87153fa818be61392130273f914e6ac

    • SHA1

      c3035f23d3943e91fba1a10e3c1fd0c535ed34fc

    • SHA256

      f6403a6a0f3ddbc8d3d0b0917ee35169d7e6e970027eeb018abe84a830de21f7

    • SHA512

      d5db9ad89cb4f41830dc0d027ed65bf14c942f615e496ea4d04f9554531bd2f4f22485eeede4632600b49738de827916326f7a2c869a6e2621ab275a258f515c

    • SSDEEP

      3072:i6afyjtmn9s6vYJVzWjRj7opcNCfWnsApYi1Cv+rCoYHUmWKvzk5NruDMKQdV:En9stVUjNCdmCv+rCUmWRraQdV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks