General

  • Target

    1ab291217b116badac069fa9f25511d0e8474870fb61d9f8cd2e51077be6e311

  • Size

    393KB

  • Sample

    241110-lftrnatgjn

  • MD5

    109c4aa4327ba57214ce83376b32935a

  • SHA1

    ea5d222c1c56b3860433e94633077b9df0b0b8cc

  • SHA256

    1ab291217b116badac069fa9f25511d0e8474870fb61d9f8cd2e51077be6e311

  • SHA512

    682ce6eaf263e0d6bb7d145411cb7c6ffe6c95e1a82c154ab29c330c29e63ae685dc91e4213f373a796e8bf078c690962ccc8081f37ec82be2629c6e5e980ace

  • SSDEEP

    6144:XvqjiIVcGYkRYpwKzaQ77nzBt+4FzRAjAf4x4CF:SjLVrYkwwKeQfrtFGAw

Malware Config

Extracted

Family

redline

C2

185.215.113.29:8678

Targets

    • Target

      1ab291217b116badac069fa9f25511d0e8474870fb61d9f8cd2e51077be6e311

    • Size

      393KB

    • MD5

      109c4aa4327ba57214ce83376b32935a

    • SHA1

      ea5d222c1c56b3860433e94633077b9df0b0b8cc

    • SHA256

      1ab291217b116badac069fa9f25511d0e8474870fb61d9f8cd2e51077be6e311

    • SHA512

      682ce6eaf263e0d6bb7d145411cb7c6ffe6c95e1a82c154ab29c330c29e63ae685dc91e4213f373a796e8bf078c690962ccc8081f37ec82be2629c6e5e980ace

    • SSDEEP

      6144:XvqjiIVcGYkRYpwKzaQ77nzBt+4FzRAjAf4x4CF:SjLVrYkwwKeQfrtFGAw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks