General

  • Target

    d7b73cd4c97aad0d39d096e2e46721a0a2bc39836d838378cc929b7a85e6d0f1

  • Size

    417KB

  • Sample

    241107-mm7sjaznav

  • MD5

    0cdaf0b6c7486adab8f4486b28357d84

  • SHA1

    0a52c651793d114ffac7560b3f291a65c44e7dcf

  • SHA256

    d7b73cd4c97aad0d39d096e2e46721a0a2bc39836d838378cc929b7a85e6d0f1

  • SHA512

    47b1c2b26cd66df8e4cc67b2dcc9216adb68d082bbcde4382a17c7068de4cc9f35c3071de6a4553c36d347eca6c729f557c752120bd5b788ee97d35750248846

  • SSDEEP

    6144:3WPqamuOVLD/UUAi+hzkU69ie0NhohZaLiRPIhKZ0kOMbor:3WPZO1/Pz+hzkMPNhohFAhs9K

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      d7b73cd4c97aad0d39d096e2e46721a0a2bc39836d838378cc929b7a85e6d0f1

    • Size

      417KB

    • MD5

      0cdaf0b6c7486adab8f4486b28357d84

    • SHA1

      0a52c651793d114ffac7560b3f291a65c44e7dcf

    • SHA256

      d7b73cd4c97aad0d39d096e2e46721a0a2bc39836d838378cc929b7a85e6d0f1

    • SHA512

      47b1c2b26cd66df8e4cc67b2dcc9216adb68d082bbcde4382a17c7068de4cc9f35c3071de6a4553c36d347eca6c729f557c752120bd5b788ee97d35750248846

    • SSDEEP

      6144:3WPqamuOVLD/UUAi+hzkU69ie0NhohZaLiRPIhKZ0kOMbor:3WPZO1/Pz+hzkMPNhohFAhs9K

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks