General

  • Target

    f7b6deace6b231c884b72e90d659fea39604e78816f390c8013a1d224b7bc655

  • Size

    351KB

  • Sample

    241108-csj9batank

  • MD5

    c03ee94df38b19e84a853d3beb01eac0

  • SHA1

    08a78d422d16115c6ddd605862aeaf9d86e1b1b3

  • SHA256

    f7b6deace6b231c884b72e90d659fea39604e78816f390c8013a1d224b7bc655

  • SHA512

    9fdcb4e3c5dc69494f32c498188001884ab6562b6006fcb295e81ceb462795dddda172071bdc3c107f9faec331e5f80837ea41dfb841b0ed64724ffaad61f68d

  • SSDEEP

    6144:vW9tAX5oidOVmKqb2+ma+N1AMpLW9BQSy:vW6oidig2+maQAw6B4

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

193.233.48.58:38989

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      f7b6deace6b231c884b72e90d659fea39604e78816f390c8013a1d224b7bc655

    • Size

      351KB

    • MD5

      c03ee94df38b19e84a853d3beb01eac0

    • SHA1

      08a78d422d16115c6ddd605862aeaf9d86e1b1b3

    • SHA256

      f7b6deace6b231c884b72e90d659fea39604e78816f390c8013a1d224b7bc655

    • SHA512

      9fdcb4e3c5dc69494f32c498188001884ab6562b6006fcb295e81ceb462795dddda172071bdc3c107f9faec331e5f80837ea41dfb841b0ed64724ffaad61f68d

    • SSDEEP

      6144:vW9tAX5oidOVmKqb2+ma+N1AMpLW9BQSy:vW6oidig2+maQAw6B4

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks