General

  • Target

    c81900df4bf7d25577c6534803882489d916a28b863973c05453224ad25bc9da

  • Size

    405KB

  • Sample

    241107-cffqcs1res

  • MD5

    0f295372216501a8992753cb2c6db8c0

  • SHA1

    1203466f46ba2c1ff54d23e8f646e1343adb1424

  • SHA256

    c81900df4bf7d25577c6534803882489d916a28b863973c05453224ad25bc9da

  • SHA512

    45ad0f88ea9fbe5a029416e792a1cc49ffec73b31177db025e41c50a819b31d6dfd19a621a8a346a7f0152d919efbdfe16c1069271d07d7d40c9b5b7e5e34b36

  • SSDEEP

    12288:2Bi4j4B2cItJeoVbIe6OdQTISQeJ9XyrMfS72:ij4B2prQMMJ9yruS7

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      c81900df4bf7d25577c6534803882489d916a28b863973c05453224ad25bc9da

    • Size

      405KB

    • MD5

      0f295372216501a8992753cb2c6db8c0

    • SHA1

      1203466f46ba2c1ff54d23e8f646e1343adb1424

    • SHA256

      c81900df4bf7d25577c6534803882489d916a28b863973c05453224ad25bc9da

    • SHA512

      45ad0f88ea9fbe5a029416e792a1cc49ffec73b31177db025e41c50a819b31d6dfd19a621a8a346a7f0152d919efbdfe16c1069271d07d7d40c9b5b7e5e34b36

    • SSDEEP

      12288:2Bi4j4B2cItJeoVbIe6OdQTISQeJ9XyrMfS72:ij4B2prQMMJ9yruS7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks