Overview

overview

10

Static

static

3

c7bf25b6d5...d5.exe

windows7-x64

10

c7bf25b6d5...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9346db463b22993fa161847c18d3d67281923070a71b247ba23e9856e1897fda

  • Size

    268KB

  • Sample

    241110-pz878sxdkd

  • MD5

    565ab49bb6db7cc1bc3dda2af5ca0a74

  • SHA1

    86359720791e2758ded0e2762b6277b6c1cb60a6

  • SHA256

    9346db463b22993fa161847c18d3d67281923070a71b247ba23e9856e1897fda

  • SHA512

    828dd085327991e248cb61528355b0cbaebf17a473972a559dc4ca748d3f5fe29c4d5a4068607dc10c045055fa5b93f9e6348151c9dc4518533d14f5ae1644db

  • SSDEEP

    6144:84/ESEj+zltRAPBoixClFDK6PCLcpn0RiI7+0HKCX6RP:8RSEixeBoB5Can0RiIsP

Score
10/10
redlinesewpalpadindiscoveryinfostealer

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:26828

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      c7bf25b6d5ca9ed4161b083f6b13f4abd41aabb5312a878e3c3b18d5550bb2d5

    • Size

      432KB

    • MD5

      3704cccc0a9160714b022e7bacff6f9c

    • SHA1

      d0b21430e8df489077105b1523f79f3020d85b03

    • SHA256

      c7bf25b6d5ca9ed4161b083f6b13f4abd41aabb5312a878e3c3b18d5550bb2d5

    • SHA512

      43c37ebe83c828afe8de6c5d6541a048e5f3087ffb40bfd17c0fdb17b3006ce019264c00965fa18d112856740c2466763a32ec838adb8b2d32fc5c0ba9c48356

    • SSDEEP

      6144:bFyL/6wYtZq0IvtRAPHoixclFDK6ZCLcpn0RiIvfA28LuzbgwuJG:Er6wY3PIveHoh3Can0RiIv428LunnX

    Score
    10/10
    redlinesewpalpadindiscoveryinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    • Redline family

      redline
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks