General

  • Target

    bb150d4f46ec65b5e1bb62185d1e870649fe249835b3fce48a96e93e07bccd59

  • Size

    433KB

  • Sample

    241109-hyg9sssqak

  • MD5

    2e2e5dea44b3e3c4c5506b0716ef8f79

  • SHA1

    e42bfe3bc4a220cba3d550c9fcc97a1e859f45e8

  • SHA256

    bb150d4f46ec65b5e1bb62185d1e870649fe249835b3fce48a96e93e07bccd59

  • SHA512

    8383070cb534f4b26911cee900768789d088e570960b3c62bd781dd4ca8419c11a4f007b1fad31a9099e6cb664d84417d3e1e9d27bb058e8c546164035be971f

  • SSDEEP

    12288:hIVm9rtmN3YtUUQs7xZLJsfozzX2ueHB:K2QN3YtUUhHV5XI

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      bb150d4f46ec65b5e1bb62185d1e870649fe249835b3fce48a96e93e07bccd59

    • Size

      433KB

    • MD5

      2e2e5dea44b3e3c4c5506b0716ef8f79

    • SHA1

      e42bfe3bc4a220cba3d550c9fcc97a1e859f45e8

    • SHA256

      bb150d4f46ec65b5e1bb62185d1e870649fe249835b3fce48a96e93e07bccd59

    • SHA512

      8383070cb534f4b26911cee900768789d088e570960b3c62bd781dd4ca8419c11a4f007b1fad31a9099e6cb664d84417d3e1e9d27bb058e8c546164035be971f

    • SSDEEP

      12288:hIVm9rtmN3YtUUQs7xZLJsfozzX2ueHB:K2QN3YtUUhHV5XI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks