General

  • Target

    f1372e538306498e345800e50443bf71c9b725664340dbdb711b68b494fed759

  • Size

    336KB

  • Sample

    241110-hlj8ma1mfy

  • MD5

    96f9214f308e00b4fcd94556bec66fd6

  • SHA1

    add84f039998cb850d9faa3a4efd8217339c289d

  • SHA256

    f1372e538306498e345800e50443bf71c9b725664340dbdb711b68b494fed759

  • SHA512

    f5e12b2afbc775d76980f895b0b866cf74ddfa4175da67e6d0a45c05cbf955067cc1d2c2552ab045a417b0f2dc0826e1cf8a856b84d930de44e4356560534035

  • SSDEEP

    6144:T6d3zjh/lG3wbc3crOeh9QDrjAhwEqDcreo+vIO72Mp+4nBnXbCXU:C3zN/s3wbFOez8MGHPJ72MpJBX

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      f1372e538306498e345800e50443bf71c9b725664340dbdb711b68b494fed759

    • Size

      336KB

    • MD5

      96f9214f308e00b4fcd94556bec66fd6

    • SHA1

      add84f039998cb850d9faa3a4efd8217339c289d

    • SHA256

      f1372e538306498e345800e50443bf71c9b725664340dbdb711b68b494fed759

    • SHA512

      f5e12b2afbc775d76980f895b0b866cf74ddfa4175da67e6d0a45c05cbf955067cc1d2c2552ab045a417b0f2dc0826e1cf8a856b84d930de44e4356560534035

    • SSDEEP

      6144:T6d3zjh/lG3wbc3crOeh9QDrjAhwEqDcreo+vIO72Mp+4nBnXbCXU:C3zN/s3wbFOez8MGHPJ72MpJBX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks