General

  • Target

    a0ca334e5a3a2bb3d55effb79c5dcf8543297fe66663b18214da4eb26889dd11

  • Size

    320KB

  • Sample

    241107-cxsfgswjfm

  • MD5

    d7f7d45c15ad416eec0730b6ef55dfd5

  • SHA1

    5963cc03d16064467372ddb26c4d1ef2bbc9cc38

  • SHA256

    a0ca334e5a3a2bb3d55effb79c5dcf8543297fe66663b18214da4eb26889dd11

  • SHA512

    bffae5a6d06854be3a31ecef046dca6f9cde24c8c6fcf8b539824f46f76cdfa56c64d8333c80ef0afc7f54def1db7525351395c232fc3a4257ec2c8e78cb41f7

  • SSDEEP

    6144:thwg6x2kmxSl1xgMrreSHbxMJg34GJQQp40GTvZeb7ITsqn:Twr2jIlBXeQOO488w7

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      a0ca334e5a3a2bb3d55effb79c5dcf8543297fe66663b18214da4eb26889dd11

    • Size

      320KB

    • MD5

      d7f7d45c15ad416eec0730b6ef55dfd5

    • SHA1

      5963cc03d16064467372ddb26c4d1ef2bbc9cc38

    • SHA256

      a0ca334e5a3a2bb3d55effb79c5dcf8543297fe66663b18214da4eb26889dd11

    • SHA512

      bffae5a6d06854be3a31ecef046dca6f9cde24c8c6fcf8b539824f46f76cdfa56c64d8333c80ef0afc7f54def1db7525351395c232fc3a4257ec2c8e78cb41f7

    • SSDEEP

      6144:thwg6x2kmxSl1xgMrreSHbxMJg34GJQQp40GTvZeb7ITsqn:Twr2jIlBXeQOO488w7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks