General

  • Target

    0698091c79d27a0d110956370dfd3cfded85a84beb6680df54ff47a8566051b6

  • Size

    255KB

  • Sample

    241108-zmfp9sskcn

  • MD5

    62045e02c99b0272dc03d18b4bac8793

  • SHA1

    20a4f23abcdcdfcfa2e13e335a6c0bf476ad03af

  • SHA256

    0698091c79d27a0d110956370dfd3cfded85a84beb6680df54ff47a8566051b6

  • SHA512

    2540cb2b1f0bc7c78e0ec1f36a9d75231923729e0626d4ca40a8f12cd326d861cbc2b3b38ef2eb1f8652f26a02dba19cf06a8bfe6ade8e7d3f7c858168c0876d

  • SSDEEP

    3072:FzXq8tLsFyOmAGKkG5GZNask3EJD2sANV7+tl4dTnnity7RHs5EDJqR/xp:FzaFyOmAGDZNw3RV7+tlmTity7RlDgV

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      0698091c79d27a0d110956370dfd3cfded85a84beb6680df54ff47a8566051b6

    • Size

      255KB

    • MD5

      62045e02c99b0272dc03d18b4bac8793

    • SHA1

      20a4f23abcdcdfcfa2e13e335a6c0bf476ad03af

    • SHA256

      0698091c79d27a0d110956370dfd3cfded85a84beb6680df54ff47a8566051b6

    • SHA512

      2540cb2b1f0bc7c78e0ec1f36a9d75231923729e0626d4ca40a8f12cd326d861cbc2b3b38ef2eb1f8652f26a02dba19cf06a8bfe6ade8e7d3f7c858168c0876d

    • SSDEEP

      3072:FzXq8tLsFyOmAGKkG5GZNask3EJD2sANV7+tl4dTnnity7RHs5EDJqR/xp:FzaFyOmAGDZNw3RV7+tlmTity7RlDgV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks