General

  • Target

    32637c3d3953484217ffb45e1585a88f80ffca7c550e78a8e92c5edeaf5c7bb1

  • Size

    411KB

  • Sample

    241107-sh76dstnew

  • MD5

    15c50b2b58cc4711a37240e8325f18ac

  • SHA1

    fdae281be32ba44daa99cdd4720caa6e06e6b34e

  • SHA256

    32637c3d3953484217ffb45e1585a88f80ffca7c550e78a8e92c5edeaf5c7bb1

  • SHA512

    b4d80080522e648bd8d41b3735b6b6c2e42fb92250ba9fd451dbda3368240d4170ca871953d042c35d23919cf40022d4d672c69c7f0bffe935e66db68bfbddc9

  • SSDEEP

    6144:ZPSTV7eZ+fY3URm05ZaIeHEqJ9vvz4ix9fruzbgwu:tSTkZ+Q3URmUanHxJ9Xz409Tunn

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      32637c3d3953484217ffb45e1585a88f80ffca7c550e78a8e92c5edeaf5c7bb1

    • Size

      411KB

    • MD5

      15c50b2b58cc4711a37240e8325f18ac

    • SHA1

      fdae281be32ba44daa99cdd4720caa6e06e6b34e

    • SHA256

      32637c3d3953484217ffb45e1585a88f80ffca7c550e78a8e92c5edeaf5c7bb1

    • SHA512

      b4d80080522e648bd8d41b3735b6b6c2e42fb92250ba9fd451dbda3368240d4170ca871953d042c35d23919cf40022d4d672c69c7f0bffe935e66db68bfbddc9

    • SSDEEP

      6144:ZPSTV7eZ+fY3URm05ZaIeHEqJ9vvz4ix9fruzbgwu:tSTkZ+Q3URmUanHxJ9Xz409Tunn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks