General

  • Target

    60337745f3403692aba9302021f522ef

  • Size

    208KB

  • Sample

    241108-fqpb2awdph

  • MD5

    60337745f3403692aba9302021f522ef

  • SHA1

    aa77519739fd5ba152ff9bb1dc90a538f8e4276f

  • SHA256

    d07309044a6db62a4a0d34bdd86d610a12d583100b8bab6a200987be22fd6ef1

  • SHA512

    89e98f469f9f1dfbf305c6a1f5cbd823adf2ac7b87920a5f8ed1c7ed1bccf767b5c733c3287cf1f456adabac31bccef8ffb2723ba20ba8041ad5195b966159b8

  • SSDEEP

    3072:Fe5Vw/at51IPe4wqbapusLbCR2U6fNUtvhmbjewX:FeA/Zm4Hb5ujNevhg6

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

193.233.48.58:38989

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      60337745f3403692aba9302021f522ef

    • Size

      208KB

    • MD5

      60337745f3403692aba9302021f522ef

    • SHA1

      aa77519739fd5ba152ff9bb1dc90a538f8e4276f

    • SHA256

      d07309044a6db62a4a0d34bdd86d610a12d583100b8bab6a200987be22fd6ef1

    • SHA512

      89e98f469f9f1dfbf305c6a1f5cbd823adf2ac7b87920a5f8ed1c7ed1bccf767b5c733c3287cf1f456adabac31bccef8ffb2723ba20ba8041ad5195b966159b8

    • SSDEEP

      3072:Fe5Vw/at51IPe4wqbapusLbCR2U6fNUtvhmbjewX:FeA/Zm4Hb5ujNevhg6

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks