General

  • Target

    d5a7a5255a60dacd0631ec450b97f6da7e81c20371ed99f2e240f6ea68dc6ea6

  • Size

    318KB

  • Sample

    241109-pcgjpstgqp

  • MD5

    a13f2f49c244d0cfae09d57cdcfa417b

  • SHA1

    5ea19f609fd4f72e74fd5d065c67177078ccf71f

  • SHA256

    d5a7a5255a60dacd0631ec450b97f6da7e81c20371ed99f2e240f6ea68dc6ea6

  • SHA512

    4e444b4293c8934f3e2ca7c3321a941c5c6c6aec6e4c18316ccaa22042a7ea4032284e7522c04ff9b920cf5194390362a87c94730e8f3a80ba4189b765761963

  • SSDEEP

    6144:ClZQsnYUfUYguu7q67/s1b4ryVhGGxG/Rh193kpBXYCNVK+6jC:sZ7vfUYguuWks102kJ/93kpmU

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:18087

Targets

    • Target

      d5a7a5255a60dacd0631ec450b97f6da7e81c20371ed99f2e240f6ea68dc6ea6

    • Size

      318KB

    • MD5

      a13f2f49c244d0cfae09d57cdcfa417b

    • SHA1

      5ea19f609fd4f72e74fd5d065c67177078ccf71f

    • SHA256

      d5a7a5255a60dacd0631ec450b97f6da7e81c20371ed99f2e240f6ea68dc6ea6

    • SHA512

      4e444b4293c8934f3e2ca7c3321a941c5c6c6aec6e4c18316ccaa22042a7ea4032284e7522c04ff9b920cf5194390362a87c94730e8f3a80ba4189b765761963

    • SSDEEP

      6144:ClZQsnYUfUYguu7q67/s1b4ryVhGGxG/Rh193kpBXYCNVK+6jC:sZ7vfUYguuWks102kJ/93kpmU

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks