Resubmissions

11-11-2024 20:42

241111-zg1hgsyqfq 10

08-08-2021 02:50

210808-7yj2chx77s 10

General

  • Target

    7e1e85f45b5af0c11a6f55bbbc8b4f7062a82df441b85563b6d6c4c47c3988cd

  • Size

    307KB

  • Sample

    241111-zg1hgsyqfq

  • MD5

    0a7d739d28b5c574cbbd63d9f5a1d74a

  • SHA1

    6a412871b87383fb43c6e781228f6a5a83d29dc5

  • SHA256

    7e1e85f45b5af0c11a6f55bbbc8b4f7062a82df441b85563b6d6c4c47c3988cd

  • SHA512

    81677276f0712cc7ae564804eadabb18028e59521ada30b1291a122f7e6e17a3989ae4f7cca0ed22abba0b8a02daaaa55daf4286a4cd5d5c925166128eabf6d6

  • SSDEEP

    6144:W8qB3ybygTJ/ymlrwu4gZYFoWDPrRgnjTwa/RxJg:W8lWmNccWHRoY

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.114:8887

Targets

    • Target

      7e1e85f45b5af0c11a6f55bbbc8b4f7062a82df441b85563b6d6c4c47c3988cd

    • Size

      307KB

    • MD5

      0a7d739d28b5c574cbbd63d9f5a1d74a

    • SHA1

      6a412871b87383fb43c6e781228f6a5a83d29dc5

    • SHA256

      7e1e85f45b5af0c11a6f55bbbc8b4f7062a82df441b85563b6d6c4c47c3988cd

    • SHA512

      81677276f0712cc7ae564804eadabb18028e59521ada30b1291a122f7e6e17a3989ae4f7cca0ed22abba0b8a02daaaa55daf4286a4cd5d5c925166128eabf6d6

    • SSDEEP

      6144:W8qB3ybygTJ/ymlrwu4gZYFoWDPrRgnjTwa/RxJg:W8lWmNccWHRoY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

    • SectopRAT

      SectopRAT is a remote access trojan first seen in November 2019.

    • SectopRAT payload

    • Sectoprat family

MITRE ATT&CK Enterprise v15

Tasks