General

  • Target

    46d54a510be22009e0a9d41acd553dfe74723942d94a2a27fc10099552f7a3bd

  • Size

    405KB

  • Sample

    241109-s8rlbsxemm

  • MD5

    a7708dec3ab280c47bb35438da0440f8

  • SHA1

    8aef2e5046c457d321b2177e20c42b5746f9cb7b

  • SHA256

    46d54a510be22009e0a9d41acd553dfe74723942d94a2a27fc10099552f7a3bd

  • SHA512

    f9c780faa042ea5c4230dcd228807175f1cd998cec04e034b24b59cf7b1818d34cb9e06bf8bbf393fa4ed939653db153c8d310761a6a88b9133085ccc9993db6

  • SSDEEP

    12288:0O3qr5cLzgxZeo0UeIF6qY1kqR8yxDisx:cr5cLAMlXB

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      46d54a510be22009e0a9d41acd553dfe74723942d94a2a27fc10099552f7a3bd

    • Size

      405KB

    • MD5

      a7708dec3ab280c47bb35438da0440f8

    • SHA1

      8aef2e5046c457d321b2177e20c42b5746f9cb7b

    • SHA256

      46d54a510be22009e0a9d41acd553dfe74723942d94a2a27fc10099552f7a3bd

    • SHA512

      f9c780faa042ea5c4230dcd228807175f1cd998cec04e034b24b59cf7b1818d34cb9e06bf8bbf393fa4ed939653db153c8d310761a6a88b9133085ccc9993db6

    • SSDEEP

      12288:0O3qr5cLzgxZeo0UeIF6qY1kqR8yxDisx:cr5cLAMlXB

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks