General

  • Target

    7b76e881dc6583e45c4ee9fa6a39749cbbd892c3

  • Size

    409KB

  • Sample

    241109-kwahaa1jdt

  • MD5

    cc52785f89238969f5b894eaa03aa01d

  • SHA1

    7b76e881dc6583e45c4ee9fa6a39749cbbd892c3

  • SHA256

    1251aff9f037c3e0ad7f7660f3c358f8bfb0632464dfb6ac35694d932e933e0d

  • SHA512

    712d335021854ed25798848f71e71100bcc8c982fb3636f03e322136ac639d37aae55af327951f95c1a2bf09f8bbcaa5553a7e62f33122846d70ba0cd4c60382

  • SSDEEP

    6144:SeJR8DiKSgtorvB/3gf9+Kepx+FgcC46gpuUzVD73j1:DR8Di9b/wA+FgVgpuqhDp

Malware Config

Extracted

Family

redline

Botnet

Sewpalpadin

C2

185.215.113.29:34865

Attributes
  • auth_value

    e4f2c88192e4d3684d671c21817e5e8c

Targets

    • Target

      7b76e881dc6583e45c4ee9fa6a39749cbbd892c3

    • Size

      409KB

    • MD5

      cc52785f89238969f5b894eaa03aa01d

    • SHA1

      7b76e881dc6583e45c4ee9fa6a39749cbbd892c3

    • SHA256

      1251aff9f037c3e0ad7f7660f3c358f8bfb0632464dfb6ac35694d932e933e0d

    • SHA512

      712d335021854ed25798848f71e71100bcc8c982fb3636f03e322136ac639d37aae55af327951f95c1a2bf09f8bbcaa5553a7e62f33122846d70ba0cd4c60382

    • SSDEEP

      6144:SeJR8DiKSgtorvB/3gf9+Kepx+FgcC46gpuUzVD73j1:DR8Di9b/wA+FgVgpuqhDp

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks