General

  • Target

    980ca94f575b1d55e074574c0dd3413d58108d0a

  • Size

    443KB

  • Sample

    241106-ttylrstcnf

  • MD5

    706a5d8705445d5cdd13ae091b6b63f3

  • SHA1

    980ca94f575b1d55e074574c0dd3413d58108d0a

  • SHA256

    edb8cad07750eb0dae97d6516039461f1a18a17c5d1250881186d424a00f5e44

  • SHA512

    d7f1a6d127ebda5fff3d2a19416909c293017f589038006567f2b5ec2a1ade501b2acb85569ff9b02d030b733d07a3988a507ef708b011aeccf9f698b226348f

  • SSDEEP

    12288:84hn02P222idHzGbW1YsugUmnyZmFCVMBmvO:bq2zdHzc+frtyZm4MBmvO

Malware Config

Extracted

Family

redline

Botnet

sewpalpadin

C2

185.215.113.29:20819

Attributes
  • auth_value

    295003a860a3f5a17023da3dc3439bfd

Targets

    • Target

      980ca94f575b1d55e074574c0dd3413d58108d0a

    • Size

      443KB

    • MD5

      706a5d8705445d5cdd13ae091b6b63f3

    • SHA1

      980ca94f575b1d55e074574c0dd3413d58108d0a

    • SHA256

      edb8cad07750eb0dae97d6516039461f1a18a17c5d1250881186d424a00f5e44

    • SHA512

      d7f1a6d127ebda5fff3d2a19416909c293017f589038006567f2b5ec2a1ade501b2acb85569ff9b02d030b733d07a3988a507ef708b011aeccf9f698b226348f

    • SSDEEP

      12288:84hn02P222idHzGbW1YsugUmnyZmFCVMBmvO:bq2zdHzc+frtyZm4MBmvO

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks