General

  • Target

    ab700abfc6602fe946fa023b51b2e05fca6b4aafe2e5ea722cfa9acfdc03618b

  • Size

    287KB

  • Sample

    241111-lkmh5sxgjg

  • MD5

    70b86808e60c67ee884238c4aed1a791

  • SHA1

    e6197f4e17ece4116d8e3379926818ad2bbee4ad

  • SHA256

    ab700abfc6602fe946fa023b51b2e05fca6b4aafe2e5ea722cfa9acfdc03618b

  • SHA512

    95645b896dae2a78a2bf77283745e9a5741f60b7f9cab93c500f4fb76de0912c7d956e7f714d2fd5cff107dad6b964f13bb6ffe65f1c6e8967a1e515ac58b2b7

  • SSDEEP

    6144:3pLF667ZwffB1lPg1IJ1/vBfvnT/jtLy77rRgJ+ojTwa/RxJg:3pRqfp1d7f/pfvTbYRQ+EY

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      ab700abfc6602fe946fa023b51b2e05fca6b4aafe2e5ea722cfa9acfdc03618b

    • Size

      287KB

    • MD5

      70b86808e60c67ee884238c4aed1a791

    • SHA1

      e6197f4e17ece4116d8e3379926818ad2bbee4ad

    • SHA256

      ab700abfc6602fe946fa023b51b2e05fca6b4aafe2e5ea722cfa9acfdc03618b

    • SHA512

      95645b896dae2a78a2bf77283745e9a5741f60b7f9cab93c500f4fb76de0912c7d956e7f714d2fd5cff107dad6b964f13bb6ffe65f1c6e8967a1e515ac58b2b7

    • SSDEEP

      6144:3pLF667ZwffB1lPg1IJ1/vBfvnT/jtLy77rRgJ+ojTwa/RxJg:3pRqfp1d7f/pfvTbYRQ+EY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks