General

  • Target

    173c339e3cc17e51db3dd6272496e99435f6ad61a4b03564fe9df665c0694dfe

  • Size

    372KB

  • Sample

    241106-agtbqstrdp

  • MD5

    0a1d372aa07e9bce72f23d463793b9b3

  • SHA1

    ecb06bcddeb7fba44cc088a259d8fc8533abab78

  • SHA256

    173c339e3cc17e51db3dd6272496e99435f6ad61a4b03564fe9df665c0694dfe

  • SHA512

    20b78f1996d29862e1c934c24a3505b924fca8643e1df26d22f67b121edf56b8c81e4f957e6c0057e6fb9f37e50470f3f5499ad1241089a9d719d5ccf4e6a764

  • SSDEEP

    6144:+Voiuetw7FeeCS/iQq0H6wHKyBfgi5dwQgrB6xuNNOCrSSNgc7DrAux:+VoinKtCmqjPyFgi5dpgrBokNZrVNjcu

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

193.233.48.58:38989

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      173c339e3cc17e51db3dd6272496e99435f6ad61a4b03564fe9df665c0694dfe

    • Size

      372KB

    • MD5

      0a1d372aa07e9bce72f23d463793b9b3

    • SHA1

      ecb06bcddeb7fba44cc088a259d8fc8533abab78

    • SHA256

      173c339e3cc17e51db3dd6272496e99435f6ad61a4b03564fe9df665c0694dfe

    • SHA512

      20b78f1996d29862e1c934c24a3505b924fca8643e1df26d22f67b121edf56b8c81e4f957e6c0057e6fb9f37e50470f3f5499ad1241089a9d719d5ccf4e6a764

    • SSDEEP

      6144:+Voiuetw7FeeCS/iQq0H6wHKyBfgi5dwQgrB6xuNNOCrSSNgc7DrAux:+VoinKtCmqjPyFgi5dpgrBokNZrVNjcu

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks