General

  • Target

    e68ea66a698cfcf56f7c50ad214cb41e78c6f7187b2156c8f87f60ed62b111ba

  • Size

    322KB

  • Sample

    241110-drta9sycjl

  • MD5

    cb2217c570877e21953626bffbdf62bc

  • SHA1

    191e62a71a3be2ed4be170a3a4e4a27123f5218e

  • SHA256

    e68ea66a698cfcf56f7c50ad214cb41e78c6f7187b2156c8f87f60ed62b111ba

  • SHA512

    a0fe0e81f5e558eb2020d5d6cd7aacd8181bfb0a7aee1473d06dc457fdb6e301e5e3dd59964771fb4bb7df2a25e3de93bd77dc88fdc9298725f7fef876932286

  • SSDEEP

    6144:eomsKSsPe4g+rWliAW98Xe9Jd0TdO/XL1NWWCIwjD38A:CsKnhWyHr08n9C5jDM

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      e68ea66a698cfcf56f7c50ad214cb41e78c6f7187b2156c8f87f60ed62b111ba

    • Size

      322KB

    • MD5

      cb2217c570877e21953626bffbdf62bc

    • SHA1

      191e62a71a3be2ed4be170a3a4e4a27123f5218e

    • SHA256

      e68ea66a698cfcf56f7c50ad214cb41e78c6f7187b2156c8f87f60ed62b111ba

    • SHA512

      a0fe0e81f5e558eb2020d5d6cd7aacd8181bfb0a7aee1473d06dc457fdb6e301e5e3dd59964771fb4bb7df2a25e3de93bd77dc88fdc9298725f7fef876932286

    • SSDEEP

      6144:eomsKSsPe4g+rWliAW98Xe9Jd0TdO/XL1NWWCIwjD38A:CsKnhWyHr08n9C5jDM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks