General

  • Target

    0c693db559ee71ecc35e63a3577745fc37d637508cc4a5625a90f8bbbd944051

  • Size

    417KB

  • Sample

    241106-17tnas1nep

  • MD5

    fe94942f0f9e253d34404134492e1b11

  • SHA1

    5f91d1955d4460b04064ced10237ca0413cb4956

  • SHA256

    0c693db559ee71ecc35e63a3577745fc37d637508cc4a5625a90f8bbbd944051

  • SHA512

    b2c64e4050b9eeed586225516dc1d49db7285a124ef663532372d970ebbad68004afb872d6c4e2fd2bb933a110ddd9338266709beecba0d2783c22a7db593caa

  • SSDEEP

    6144:YPKOrhS7WtPp1KhkcwpC9wmVBqtuT0hOtAVzfTM8uzbgwu:cKOrhHtx1qkdoG2kuTQVvRunn

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      0c693db559ee71ecc35e63a3577745fc37d637508cc4a5625a90f8bbbd944051

    • Size

      417KB

    • MD5

      fe94942f0f9e253d34404134492e1b11

    • SHA1

      5f91d1955d4460b04064ced10237ca0413cb4956

    • SHA256

      0c693db559ee71ecc35e63a3577745fc37d637508cc4a5625a90f8bbbd944051

    • SHA512

      b2c64e4050b9eeed586225516dc1d49db7285a124ef663532372d970ebbad68004afb872d6c4e2fd2bb933a110ddd9338266709beecba0d2783c22a7db593caa

    • SSDEEP

      6144:YPKOrhS7WtPp1KhkcwpC9wmVBqtuT0hOtAVzfTM8uzbgwu:cKOrhHtx1qkdoG2kuTQVvRunn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks