General

  • Target

    9fc69dfa0614b2ea406ddc4485a7bc60c4501847b9f44c5079fb16117e28bc5f

  • Size

    329KB

  • Sample

    241108-x9bnqaxlhx

  • MD5

    2b6ea6423afb79719d7f703c96d4a12c

  • SHA1

    c3af53a2bc3d5cf60c4727a969affef67125942d

  • SHA256

    9fc69dfa0614b2ea406ddc4485a7bc60c4501847b9f44c5079fb16117e28bc5f

  • SHA512

    94224d33d9b6f7b78249a3030a267b09ccc6905713b88688aebbfec57648f21e85acc5597e666ce568768303fab9da11d41b33eebdd082d05b98d2b08fe8dc5f

  • SSDEEP

    6144:xfwLuP23sGJvAGMqfxQ2bUaqrG/0uFxPW6+GvAlb7ITsqt:xfwaP7QIG38adMyPW9Z7

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      9fc69dfa0614b2ea406ddc4485a7bc60c4501847b9f44c5079fb16117e28bc5f

    • Size

      329KB

    • MD5

      2b6ea6423afb79719d7f703c96d4a12c

    • SHA1

      c3af53a2bc3d5cf60c4727a969affef67125942d

    • SHA256

      9fc69dfa0614b2ea406ddc4485a7bc60c4501847b9f44c5079fb16117e28bc5f

    • SHA512

      94224d33d9b6f7b78249a3030a267b09ccc6905713b88688aebbfec57648f21e85acc5597e666ce568768303fab9da11d41b33eebdd082d05b98d2b08fe8dc5f

    • SSDEEP

      6144:xfwLuP23sGJvAGMqfxQ2bUaqrG/0uFxPW6+GvAlb7ITsqt:xfwaP7QIG38adMyPW9Z7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks