Overview

overview

10

Static

static

3

f0284c1bb8...6e.exe

windows7-x64

10

f0284c1bb8...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    683910de2c1514a1402e2fc5451cdc352ab44ae2

  • Size

    273KB

  • Sample

    241108-w5lgpaxdpn

  • MD5

    0fcbfa203a6fe7b0c81a7239eec66755

  • SHA1

    683910de2c1514a1402e2fc5451cdc352ab44ae2

  • SHA256

    532fd6fecf71c7f9c68357d3137861edbeebdcd76ee0796ef206c58c03043926

  • SHA512

    6c26fea9da888a7dd3efdbd75065a0f07f307bf1446e24f00873b92f2972af705af2151d224c93e6c47dd02ac13cdadda0e0b71207aa6236c2b7941021f5c24c

  • SSDEEP

    6144:ixogbsQzIKDCy4ZMX4yP4hT2Y/EMMZHLHR+KA4zn:RgYbKDCy42XdP452GXMZH8x4zn

Score
10/10
redlinesewpalpadindiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

sewPalpadin

C2

193.233.48.58:43014

Attributes
  • auth_value

    a3158e3c8d5a8ca5a8f5effcd18a634f

Targets

    • Target

      f0284c1bb8ff59f04b6a3c2f38c4de1a250f2d63d628ea3b45f6b4e5fcc1ba6e

    • Size

      435KB

    • MD5

      ab9a043f2ea0fc52fb697093a4ee7c45

    • SHA1

      895198e48444340a8958355fa1b3249ccf81c86f

    • SHA256

      f0284c1bb8ff59f04b6a3c2f38c4de1a250f2d63d628ea3b45f6b4e5fcc1ba6e

    • SHA512

      2dbb37bc14770e86b2e50f1611243fe2d33708bac823867e87771ec86144c5a06c232f19be68a7d06a83dae1d863b22e5539d5e2ddc6cef69e3e5a62c2561709

    • SSDEEP

      6144:PW3VOAFmlk/5RKbz6mdleGXQyXO/GrH4hTQY/EcMZHrHR+KAr:2VJmla5MX6mOGXQ4D45QGxMZHcx

    Score
    10/10
    redlinesewpalpadindiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks