General

  • Target

    0c10aeccb9c1f4af3607da1d2163682b9311d90b860780f9b9f7b9808e936fde

  • Size

    444KB

  • Sample

    241109-lx8bdasdmr

  • MD5

    ff4d8a2bf99e2423a741e0d811831adc

  • SHA1

    af488d1f549d1c05c21d661578607e08583de13d

  • SHA256

    0c10aeccb9c1f4af3607da1d2163682b9311d90b860780f9b9f7b9808e936fde

  • SHA512

    db7d00a0a600fa0fe81799828a612a1c9ab91dea0ad68c86e9d730ab7f3cddc7287d3501f38197621c165d7e28c8c5cd92dbdf0694e8541143c88212d680104d

  • SSDEEP

    6144:JLUwbU1fvkN1WFmBVS/mb6SU0EOJ2fCiGJ:JXbUxU1LBNu5BOJ/J

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      0c10aeccb9c1f4af3607da1d2163682b9311d90b860780f9b9f7b9808e936fde

    • Size

      444KB

    • MD5

      ff4d8a2bf99e2423a741e0d811831adc

    • SHA1

      af488d1f549d1c05c21d661578607e08583de13d

    • SHA256

      0c10aeccb9c1f4af3607da1d2163682b9311d90b860780f9b9f7b9808e936fde

    • SHA512

      db7d00a0a600fa0fe81799828a612a1c9ab91dea0ad68c86e9d730ab7f3cddc7287d3501f38197621c165d7e28c8c5cd92dbdf0694e8541143c88212d680104d

    • SSDEEP

      6144:JLUwbU1fvkN1WFmBVS/mb6SU0EOJ2fCiGJ:JXbUxU1LBNu5BOJ/J

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks