General

  • Target

    7d13d16502ac1132d05357c9a8b84861

  • Size

    401KB

  • Sample

    241109-qr1rkavglk

  • MD5

    7d13d16502ac1132d05357c9a8b84861

  • SHA1

    998bb3024d43f1a210516e9b41141ca75ea75170

  • SHA256

    18a41ed08fbc8d98ea32a3cfc843f249680878a6f0bbb276cc157a75fd9b5de2

  • SHA512

    cb20649079510444733bb61731950d0c53be34881261624d8abb8d3feda2ff87ecb1bf0794d60ee8640b2d4f8bf62bb545516f770db0b1a2c071194e5ce4c4e4

  • SSDEEP

    6144:nkBTgLMikldDUcuJPfMC3I4Q3AE2c3YGuv8/P9cxGTPeqGoaraGN:nkBs43ldDUzhN44QwcY3wP9ci/GN

Malware Config

Extracted

Family

redline

Botnet

SEWPALPADIN

C2

45.9.20.111:1355

Attributes
  • auth_value

    8ca76b3bc579d0d08c2ac1a429d4f5a0

Targets

    • Target

      7d13d16502ac1132d05357c9a8b84861

    • Size

      401KB

    • MD5

      7d13d16502ac1132d05357c9a8b84861

    • SHA1

      998bb3024d43f1a210516e9b41141ca75ea75170

    • SHA256

      18a41ed08fbc8d98ea32a3cfc843f249680878a6f0bbb276cc157a75fd9b5de2

    • SHA512

      cb20649079510444733bb61731950d0c53be34881261624d8abb8d3feda2ff87ecb1bf0794d60ee8640b2d4f8bf62bb545516f770db0b1a2c071194e5ce4c4e4

    • SSDEEP

      6144:nkBTgLMikldDUcuJPfMC3I4Q3AE2c3YGuv8/P9cxGTPeqGoaraGN:nkBs43ldDUzhN44QwcY3wP9ci/GN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks