General

  • Target

    67969d68aa7dbdf2bdacd18659f5e5e29729d1a11107cf3c16ddc3fa3aa67d88

  • Size

    421KB

  • Sample

    241109-h8qc6asrbl

  • MD5

    b6ad84b66203c3475460acbbf3b31a94

  • SHA1

    904d6a40a642cee4161ea9d69ec705921c676454

  • SHA256

    67969d68aa7dbdf2bdacd18659f5e5e29729d1a11107cf3c16ddc3fa3aa67d88

  • SHA512

    5ebe0ec991b0319265e9b863fd0fd9f3f43284e611537aee6cf78466c2cc5451486f9d9d941bc90852e69bb33b0322366b6b8b9b556d71d560981f63fb513c3e

  • SSDEEP

    12288:o+5LIUZomhXHoqKznGSeOTEpsXi3JJ44jyK:okkUZoIXHohzn7Qey3JiK

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      67969d68aa7dbdf2bdacd18659f5e5e29729d1a11107cf3c16ddc3fa3aa67d88

    • Size

      421KB

    • MD5

      b6ad84b66203c3475460acbbf3b31a94

    • SHA1

      904d6a40a642cee4161ea9d69ec705921c676454

    • SHA256

      67969d68aa7dbdf2bdacd18659f5e5e29729d1a11107cf3c16ddc3fa3aa67d88

    • SHA512

      5ebe0ec991b0319265e9b863fd0fd9f3f43284e611537aee6cf78466c2cc5451486f9d9d941bc90852e69bb33b0322366b6b8b9b556d71d560981f63fb513c3e

    • SSDEEP

      12288:o+5LIUZomhXHoqKznGSeOTEpsXi3JJ44jyK:okkUZoIXHohzn7Qey3JiK

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks