General

  • Target

    772abd60da2fe5291ad41246011d7bcc83f8f8c994e03a9dd711a8b6c8990f89

  • Size

    251KB

  • Sample

    241111-a9aebsyepk

  • MD5

    c6e8778ed52a20e4fab9469e72fa7846

  • SHA1

    55286bdb34547d39c3cb39a2503acc2418361415

  • SHA256

    772abd60da2fe5291ad41246011d7bcc83f8f8c994e03a9dd711a8b6c8990f89

  • SHA512

    1192e05b757a0431ffc59288ea6cc06d2f3de5e608f0f078937b7566fc6695dcecf1ca043873367b3cb7dae1b226d6c9a742c24d548f75c61ce55e604b4a19f9

  • SSDEEP

    6144:ooW7Z2JXt8xvDWrrGn8ohKrpHoAVoEdVpS/BLGgyrr:z9ovwuEFaEn4v+r

Malware Config

Extracted

Family

redline

Botnet

wcmFr5xKM66WkyVK

C2

45.42.45.232:53637

Targets

    • Target

      Elsify.exe

    • Size

      130KB

    • MD5

      aeed3dd9e999b2d1c1b57a4250b4fec7

    • SHA1

      5f086d464e9d7b68e8220926f4ccafb56cf416c0

    • SHA256

      2d30de2a208160f26fe60529f460e1489104bde480b0007be47cd2f99cb52d97

    • SHA512

      4fdabb500ff26408f37a0be4780e86f5c2ec20243a3f1d8ece5ded15919584d172850d69997b4003dd3ceb7715813eaf90eda358100e6bdb035d11e52c70fe78

    • SSDEEP

      3072:6sUOYP+zi0ZbYe1g0ujyzdjveomqoIIK:6JOYWG0Lahy5iqoII

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

    • Target

      Mono.Cecil.Mdb.dll

    • Size

      42KB

    • MD5

      1c6aca0f1b1fa1661fc1e43c79334f7c

    • SHA1

      ec0f591a6d12e1ea7dc8714ec7e5ad7a04ef455d

    • SHA256

      411f8ed8c49738fa38a56ed8f991d556227d13602e83186e66ae1c4f821c940b

    • SHA512

      1c59e939d108f15881d29fe4ced4e5fa4a4476394b58b6eb464da77192cb8fe9221b7cd780af4596914d4cce7c3fc53f1bb567f944c58829de8efbe1fd87be76

    • SSDEEP

      768:Ar5EYZep98C87KHeBUZwrEzsEAnbF+em50KktmM4CRIcZwMRTIzMAtpw:Ar59g98C87KHeBUb5AnZG+zdwMRTzAtS

    Score
    1/10
    • Target

      Mono.Cecil.Pdb.dll

    • Size

      87KB

    • MD5

      6d5eb860c2be5dbeb470e7d3f3e7dda4

    • SHA1

      80c76660b87c52127b1a7da48e27700f75362041

    • SHA256

      447ede1984bb4acd73bd97c0ec57a11c079cee8301c91fb199ca98c1906d3cc4

    • SHA512

      64cf4fe7de68a35720d2b9338ba9cf182e127d95d72d2ccf7ff5c73a368133663e70c988a460825fa87b2d03717a4447948d5262f56aceb7c3bf1cb3ab5a41a5

    • SSDEEP

      1536:2OCAsdBo+am5OMwr5IlALYKXgAJGsZhTjrjvjCXeO:ZCjta0OMuIlArVJGqT/jveXeO

    Score
    1/10
    • Target

      Mono.Cecil.dll

    • Size

      350KB

    • MD5

      de69bb29d6a9dfb615a90df3580d63b1

    • SHA1

      74446b4dcc146ce61e5216bf7efac186adf7849b

    • SHA256

      f66f97866433e688acc3e4cd1e6ef14505f81df6b26dd6215e376767f6f954bc

    • SHA512

      6e96a510966a4acbca900773d4409720b0771fede37f24431bf0d8b9c611eaa152ba05ee588bb17f796d7b8caaccc10534e7cc1c907c28ddfa54ac4ce3952015

    • SSDEEP

      6144:jIevdbLPNYe8bikm98KXPHhOWY/fFREomhUFD3z:se1PNL+QRfBg/f/EWFD

    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks