General

  • Target

    dfb357dbf654ddbfba371764c3f366f8a8c26f8f53fd93bf1bb71d06391d437d

  • Size

    643KB

  • Sample

    241110-a785waymfj

  • MD5

    4e836f5f7fcd41893dc32a1b99f41838

  • SHA1

    64da6e2f95dffdaf7d147409033db90ccc5a17e0

  • SHA256

    dfb357dbf654ddbfba371764c3f366f8a8c26f8f53fd93bf1bb71d06391d437d

  • SHA512

    65a4b53f3ed6bfc03d6f9943f50a600fd91ac22fb99562d04fdf190aa7f48f3072f3b9ed7579d084b35c8c6a254e62f72056f35344bb6ad08dea54763fdb747d

  • SSDEEP

    12288:kE26B9+Ws/1K5mM1TceerFVNaI75gZInQi8r/pf:kE26YZAAM5C1guQi8r/F

Malware Config

Extracted

Family

redline

C2

sheerishu.xyz:80

Targets

    • Target

      dfb357dbf654ddbfba371764c3f366f8a8c26f8f53fd93bf1bb71d06391d437d

    • Size

      643KB

    • MD5

      4e836f5f7fcd41893dc32a1b99f41838

    • SHA1

      64da6e2f95dffdaf7d147409033db90ccc5a17e0

    • SHA256

      dfb357dbf654ddbfba371764c3f366f8a8c26f8f53fd93bf1bb71d06391d437d

    • SHA512

      65a4b53f3ed6bfc03d6f9943f50a600fd91ac22fb99562d04fdf190aa7f48f3072f3b9ed7579d084b35c8c6a254e62f72056f35344bb6ad08dea54763fdb747d

    • SSDEEP

      12288:kE26B9+Ws/1K5mM1TceerFVNaI75gZInQi8r/pf:kE26YZAAM5C1guQi8r/F

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks