General

  • Target

    3ae35e6b93b4dbe2f626f859a9c16d8a

  • Size

    457KB

  • Sample

    241107-qcdy9avpek

  • MD5

    3ae35e6b93b4dbe2f626f859a9c16d8a

  • SHA1

    7ffee1c6b998b021a31f0d02933e450470992036

  • SHA256

    72c69ee8885fa9e56621446bad00c817ab26fbcdbdeb70a66a7a849c7e1c47af

  • SHA512

    962aad352dd30223894cb37a33e349574a94c9514b5651250206e8cb595d1c012e37f86c3eb432791c3ee555546891ca5bedea832341b6eedb470082406b10ae

  • SSDEEP

    6144:L3cHweU9x0/yZtLBAF+Eo/P9daBBmhL77nEuYGp7ITsqYigavwVfG:L3clA0/yZ0Fdo39KAd7UGp7u7

Malware Config

Extracted

Family

redline

Botnet

SEWPALPADIN

C2

45.9.20.112:57175

Attributes
  • auth_value

    5690233e096f92772f1ad7a4afefede9

Targets

    • Target

      3ae35e6b93b4dbe2f626f859a9c16d8a

    • Size

      457KB

    • MD5

      3ae35e6b93b4dbe2f626f859a9c16d8a

    • SHA1

      7ffee1c6b998b021a31f0d02933e450470992036

    • SHA256

      72c69ee8885fa9e56621446bad00c817ab26fbcdbdeb70a66a7a849c7e1c47af

    • SHA512

      962aad352dd30223894cb37a33e349574a94c9514b5651250206e8cb595d1c012e37f86c3eb432791c3ee555546891ca5bedea832341b6eedb470082406b10ae

    • SSDEEP

      6144:L3cHweU9x0/yZtLBAF+Eo/P9daBBmhL77nEuYGp7ITsqYigavwVfG:L3clA0/yZ0Fdo39KAd7UGp7u7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks