General

  • Target

    fd7443e87301246ebd6de25613e15f9b7ca5a7fc361ab72deb663a68c4431333

  • Size

    279KB

  • Sample

    241107-m9tt7a1fkn

  • MD5

    131df7c1aec935807e7ac54c3bf673f7

  • SHA1

    942c74023ce745f421e68479ad8a41b00cbe1a79

  • SHA256

    fd7443e87301246ebd6de25613e15f9b7ca5a7fc361ab72deb663a68c4431333

  • SHA512

    7e976b0c8c95ff5991d7ff40194c505c5768c2db9bb689f3d83b5563fb881639494c847fbfc4cb3db9e0bc3a36c378f6715c370c60886c9e0d3aed994c5a77ed

  • SSDEEP

    6144:zm+HMoaQKHi1GRi76n2himILiOUq5GeJofYPdZXvjpprNIyD:6+H8QGj2h/ITUqoFadLFD

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      fd7443e87301246ebd6de25613e15f9b7ca5a7fc361ab72deb663a68c4431333

    • Size

      279KB

    • MD5

      131df7c1aec935807e7ac54c3bf673f7

    • SHA1

      942c74023ce745f421e68479ad8a41b00cbe1a79

    • SHA256

      fd7443e87301246ebd6de25613e15f9b7ca5a7fc361ab72deb663a68c4431333

    • SHA512

      7e976b0c8c95ff5991d7ff40194c505c5768c2db9bb689f3d83b5563fb881639494c847fbfc4cb3db9e0bc3a36c378f6715c370c60886c9e0d3aed994c5a77ed

    • SSDEEP

      6144:zm+HMoaQKHi1GRi76n2himILiOUq5GeJofYPdZXvjpprNIyD:6+H8QGj2h/ITUqoFadLFD

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks