General

  • Target

    a1a9b02aa83a63118989ab1e864631c00ad95b219f7bec15de6b2ac9e4f233e6

  • Size

    358KB

  • Sample

    241109-vkvn7aycme

  • MD5

    431b6b45df22b2f34941174536f8ddc5

  • SHA1

    ed30f82ef16835d0d784c103ff964f0b0b9d419b

  • SHA256

    a1a9b02aa83a63118989ab1e864631c00ad95b219f7bec15de6b2ac9e4f233e6

  • SHA512

    97e18102af3461ab1e08e9e10cae5c4889f60e2a931db77fec315256111920bcdf42b02806b21a96b5ef47e420e0c92da295344ddad572954e6124c9a638f4e1

  • SSDEEP

    6144:k2nFpuoibY3nHz/+vQjOBNC2JxFsxffQnZtsZ3FSfkhiHK:k2nFpuoibGHzW4jON09fQZWZVSmiH

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:18087

Targets

    • Target

      a1a9b02aa83a63118989ab1e864631c00ad95b219f7bec15de6b2ac9e4f233e6

    • Size

      358KB

    • MD5

      431b6b45df22b2f34941174536f8ddc5

    • SHA1

      ed30f82ef16835d0d784c103ff964f0b0b9d419b

    • SHA256

      a1a9b02aa83a63118989ab1e864631c00ad95b219f7bec15de6b2ac9e4f233e6

    • SHA512

      97e18102af3461ab1e08e9e10cae5c4889f60e2a931db77fec315256111920bcdf42b02806b21a96b5ef47e420e0c92da295344ddad572954e6124c9a638f4e1

    • SSDEEP

      6144:k2nFpuoibY3nHz/+vQjOBNC2JxFsxffQnZtsZ3FSfkhiHK:k2nFpuoibGHzW4jON09fQZWZVSmiH

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks