General

  • Target

    39f00eb8cef64c912ae776e06c0575b4

  • Size

    408KB

  • Sample

    241108-tz8zpavke1

  • MD5

    39f00eb8cef64c912ae776e06c0575b4

  • SHA1

    06510ccc67359cab7d1bffa2369f89c3a4d2e3d7

  • SHA256

    03e4f0f2ae66bdb9181166afd2b4eda11fbff69a3f9d3bad6f4b6f26fbe6dc23

  • SHA512

    895e0eba18e05f9cca9c93305197a25019faa6b65c474ab7c0d21df18b47e717e3062349ae978c269bad433732af533d5a0655315f79e198f2d88750d292853f

  • SSDEEP

    6144:MFV17WRInnAN3ue+uvNmebxYJ9F21e5csnSEnDHTSUTAAOxYLCe2b:MP7WRInNuvFbWJ9FrqsSq2UTABqX+

Malware Config

Extracted

Family

redline

Botnet

Sewpalpadin

C2

185.215.113.29:34865

Attributes
  • auth_value

    e4f2c88192e4d3684d671c21817e5e8c

Targets

    • Target

      39f00eb8cef64c912ae776e06c0575b4

    • Size

      408KB

    • MD5

      39f00eb8cef64c912ae776e06c0575b4

    • SHA1

      06510ccc67359cab7d1bffa2369f89c3a4d2e3d7

    • SHA256

      03e4f0f2ae66bdb9181166afd2b4eda11fbff69a3f9d3bad6f4b6f26fbe6dc23

    • SHA512

      895e0eba18e05f9cca9c93305197a25019faa6b65c474ab7c0d21df18b47e717e3062349ae978c269bad433732af533d5a0655315f79e198f2d88750d292853f

    • SSDEEP

      6144:MFV17WRInnAN3ue+uvNmebxYJ9F21e5csnSEnDHTSUTAAOxYLCe2b:MP7WRInNuvFbWJ9FrqsSq2UTABqX+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks