General

  • Target

    13cada6e5a2c389ec01fde6de41c03bf

  • Size

    457KB

  • Sample

    241107-e35dcawcqn

  • MD5

    13cada6e5a2c389ec01fde6de41c03bf

  • SHA1

    58475c824e9faa39da0ed1421b39931602895535

  • SHA256

    ffba5c89c584271389e24601714488f1767cf1f59d211f724de4bc2fa4f9ecaa

  • SHA512

    9da87edd45d16727c2f21d251988d79d819e2562d4923dd3d8196c9efa78d757fd32c1f0d1369046501e0c8a70823e0d05d8b4c11087e4810b9398149742dfe3

  • SSDEEP

    12288:NdqidHcRRBxG/5RN7pDHTdifCXpmZz7u7:6QHc1UX7pHDZmY7

Malware Config

Extracted

Family

redline

Botnet

SEWPALPADIN

C2

45.9.20.112:57175

Attributes
  • auth_value

    5690233e096f92772f1ad7a4afefede9

Targets

    • Target

      13cada6e5a2c389ec01fde6de41c03bf

    • Size

      457KB

    • MD5

      13cada6e5a2c389ec01fde6de41c03bf

    • SHA1

      58475c824e9faa39da0ed1421b39931602895535

    • SHA256

      ffba5c89c584271389e24601714488f1767cf1f59d211f724de4bc2fa4f9ecaa

    • SHA512

      9da87edd45d16727c2f21d251988d79d819e2562d4923dd3d8196c9efa78d757fd32c1f0d1369046501e0c8a70823e0d05d8b4c11087e4810b9398149742dfe3

    • SSDEEP

      12288:NdqidHcRRBxG/5RN7pDHTdifCXpmZz7u7:6QHc1UX7pHDZmY7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks