General

  • Target

    f2d94107db385fae38b50dbf0af5c80b3062ca03ec1ae4d841978b622aaeb6b1

  • Size

    323KB

  • Sample

    241108-cmcmaaskcs

  • MD5

    86b011600e3403c0e707ce805715f63f

  • SHA1

    ad1f1e3e8e4c2a06d73816753fc115c39d35ad18

  • SHA256

    f2d94107db385fae38b50dbf0af5c80b3062ca03ec1ae4d841978b622aaeb6b1

  • SHA512

    6a3a7ac95e0c7a904a4db857cb54f22bcaf125d9593873df47047fa38bf468f4f20d3828ea724f834744c1b29edc55211304478e4d8794f7ac3cce40bf108bf4

  • SSDEEP

    6144:1awZ8ufAuk/hYUqxBiwI0tLEQvh4WKopqxsiDRW9vfb7ITsq0:ZZ8uXk/h0iuSQvh4WKopq7RWR7

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      f2d94107db385fae38b50dbf0af5c80b3062ca03ec1ae4d841978b622aaeb6b1

    • Size

      323KB

    • MD5

      86b011600e3403c0e707ce805715f63f

    • SHA1

      ad1f1e3e8e4c2a06d73816753fc115c39d35ad18

    • SHA256

      f2d94107db385fae38b50dbf0af5c80b3062ca03ec1ae4d841978b622aaeb6b1

    • SHA512

      6a3a7ac95e0c7a904a4db857cb54f22bcaf125d9593873df47047fa38bf468f4f20d3828ea724f834744c1b29edc55211304478e4d8794f7ac3cce40bf108bf4

    • SSDEEP

      6144:1awZ8ufAuk/hYUqxBiwI0tLEQvh4WKopqxsiDRW9vfb7ITsq0:ZZ8uXk/h0iuSQvh4WKopq7RWR7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks