General

  • Target

    1b06c0ced436d90130f5a7596702e0545d260f5572473094a4d6312460ce5bbd

  • Size

    280KB

  • Sample

    241108-y6efwaygjc

  • MD5

    e0427b71745314b77b9ab68aa164c96b

  • SHA1

    84f1524954e7110fdf6c58a2821c20f91f77728b

  • SHA256

    1b06c0ced436d90130f5a7596702e0545d260f5572473094a4d6312460ce5bbd

  • SHA512

    a557fd8139ca26601f9b64a902ac06b3c080014411b0e7da90a5c7ecb270cd19bdab8f819e2e507b511f376d1b26b344c14ba345bbf0dfde45dfbadcbe9a25ec

  • SSDEEP

    6144:Ym+HE9GF0mxFGhfGzHeiU5CoeW0S1+Es7B4PttVh72llfh:n+HkG6IoYiTeW0S1hsVKl2lNh

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      1b06c0ced436d90130f5a7596702e0545d260f5572473094a4d6312460ce5bbd

    • Size

      280KB

    • MD5

      e0427b71745314b77b9ab68aa164c96b

    • SHA1

      84f1524954e7110fdf6c58a2821c20f91f77728b

    • SHA256

      1b06c0ced436d90130f5a7596702e0545d260f5572473094a4d6312460ce5bbd

    • SHA512

      a557fd8139ca26601f9b64a902ac06b3c080014411b0e7da90a5c7ecb270cd19bdab8f819e2e507b511f376d1b26b344c14ba345bbf0dfde45dfbadcbe9a25ec

    • SSDEEP

      6144:Ym+HE9GF0mxFGhfGzHeiU5CoeW0S1+Es7B4PttVh72llfh:n+HkG6IoYiTeW0S1hsVKl2lNh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks