Overview

overview

10

Static

static

3

05b89843f4...40.exe

windows7-x64

10

05b89843f4...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9ecb233859439e55b71a3a1ff2043dff4d344917cd9fa895aee422c9251baff0

  • Size

    260KB

  • Sample

    241105-j5hdtaxeqg

  • MD5

    b5d7d1b465b2a94fd0ef75c114e42b5f

  • SHA1

    a83e361dd13e1a8f6b8ead47347ebf4ac7d0bd45

  • SHA256

    9ecb233859439e55b71a3a1ff2043dff4d344917cd9fa895aee422c9251baff0

  • SHA512

    f397391bf20ee8402578dc7aaf9bf6e5435244f93f78f8cd4346ade0c5dbf4cd4d24a61728e69ab5208e3a49958f897159267ce9f84d89765de6f428b12d0279

  • SSDEEP

    6144:kpJOabteDht0lbftY7d+hTgr+PdZWiXaE0sgIqAlKW86rQV2c:kpzbU92fhg+ZxacgI7O6QV2c

Score
10/10
redlinesewpalpadindiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

193.233.48.58:38989

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      05b89843f4c83faf75e680bcddfe555d62c31ccf9588d6391f50e86adf380340

    • Size

      364KB

    • MD5

      d2c033b1b73fe36e946c5e1559caee70

    • SHA1

      564c7f7ee73ca3c3b6811c94deebae65bf0dc826

    • SHA256

      05b89843f4c83faf75e680bcddfe555d62c31ccf9588d6391f50e86adf380340

    • SHA512

      d9f148c35675967f6d4eee65134e7c7942362065cd9be98b9162b2cf1a3145339ffe7b2c02d14bdb030bf1bc914d0eb6606dc80c15a52e38255abc4f8b002c5e

    • SSDEEP

      6144:j2x5aYsC+PgW16xkOFbYSHWvd+hTcr+PdRWiXaQ0sgIdgyGjr811Feo:jbYsC+YW1aJYSHWUA+RxaYgIdg1jO

    Score
    10/10
    redlinesewpalpadindiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks