General

  • Target

    8b187a26728aaf8e2fb66dbe403031e4eb609b88f8a111abaaf59331326e5659

  • Size

    248KB

  • Sample

    241105-p35zzssclk

  • MD5

    4e62a135fc8734b293da9a1459e91b1a

  • SHA1

    7bbad5c75bef3c6d6b70da314081cd60b907da13

  • SHA256

    8b187a26728aaf8e2fb66dbe403031e4eb609b88f8a111abaaf59331326e5659

  • SHA512

    eba49d30e98ca74312917cb42d476a6ceae583eb84634b32f686122abbe2e01ae694aa5258f203a72acea6bc92c75d87a6cd699962af9767ef3324745dfb93af

  • SSDEEP

    6144:in6VN6BAEbaBpUagD+VVn3c0lQpLo5kf:6O0AE+G+VVdlQ1og

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      8b187a26728aaf8e2fb66dbe403031e4eb609b88f8a111abaaf59331326e5659

    • Size

      248KB

    • MD5

      4e62a135fc8734b293da9a1459e91b1a

    • SHA1

      7bbad5c75bef3c6d6b70da314081cd60b907da13

    • SHA256

      8b187a26728aaf8e2fb66dbe403031e4eb609b88f8a111abaaf59331326e5659

    • SHA512

      eba49d30e98ca74312917cb42d476a6ceae583eb84634b32f686122abbe2e01ae694aa5258f203a72acea6bc92c75d87a6cd699962af9767ef3324745dfb93af

    • SSDEEP

      6144:in6VN6BAEbaBpUagD+VVn3c0lQpLo5kf:6O0AE+G+VVdlQ1og

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks