General

  • Target

    47129e0fb0bff22e77abffed01d28c26054d09cda072eab0ed4a07a2924571f0

  • Size

    457KB

  • Sample

    241108-sxdkbsvdnl

  • MD5

    b1d4b33b9567c2c51eaa2978feaf5949

  • SHA1

    f3a048849349c0c62b21bc033b5d2fd247ddceb0

  • SHA256

    47129e0fb0bff22e77abffed01d28c26054d09cda072eab0ed4a07a2924571f0

  • SHA512

    321782f5c3a0fdd2e8416c2e7b1ec1058efe95f24ebfcc56f948b074c0a5a51e550ce6a7d589d286165bd6bce540faa88adb02a7870ea4d2899c857a61aaefde

  • SSDEEP

    6144:Ikc3KUpgf7379jXRzolOsAJ2pe2DVxl6pNVSYbXNAUsHu7ITsqYigavwVfG:IkctM73VRJ2PDMqgNvsO7u7

Malware Config

Extracted

Family

redline

Botnet

SEWPALPADIN

C2

45.9.20.112:57175

Attributes
  • auth_value

    5690233e096f92772f1ad7a4afefede9

Targets

    • Target

      47129e0fb0bff22e77abffed01d28c26054d09cda072eab0ed4a07a2924571f0

    • Size

      457KB

    • MD5

      b1d4b33b9567c2c51eaa2978feaf5949

    • SHA1

      f3a048849349c0c62b21bc033b5d2fd247ddceb0

    • SHA256

      47129e0fb0bff22e77abffed01d28c26054d09cda072eab0ed4a07a2924571f0

    • SHA512

      321782f5c3a0fdd2e8416c2e7b1ec1058efe95f24ebfcc56f948b074c0a5a51e550ce6a7d589d286165bd6bce540faa88adb02a7870ea4d2899c857a61aaefde

    • SSDEEP

      6144:Ikc3KUpgf7379jXRzolOsAJ2pe2DVxl6pNVSYbXNAUsHu7ITsqYigavwVfG:IkctM73VRJ2PDMqgNvsO7u7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks