General

  • Target

    c2ce52383f715276fe19937f786f3e5e18ba90595dd0f93f0f80cebb74f21e5e

  • Size

    299KB

  • Sample

    241110-ryadmaxrd1

  • MD5

    904d398746f79cd69960f696918eea6b

  • SHA1

    4be5e3a983883eb88e64da1f038af6db28819a71

  • SHA256

    c2ce52383f715276fe19937f786f3e5e18ba90595dd0f93f0f80cebb74f21e5e

  • SHA512

    ad4866f6ce1252fc5c447a81fa7777b80c53a28a608fb326142ef49dc95d88aa4c9442acf3e5e3219114a354bcb0b43eab8f78acf7b3319562a5b70e49afd9ab

  • SSDEEP

    6144:GXIIniK26pIt6XkKGiw7CVaa9yd6KmqfR:YNniK26St6Xkyw259yduqfR

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

185.215.113.29:1102

Attributes
  • auth_value

    41d3df6d093b1e36993abf16af0d6f2d

Targets

    • Target

      c2ce52383f715276fe19937f786f3e5e18ba90595dd0f93f0f80cebb74f21e5e

    • Size

      299KB

    • MD5

      904d398746f79cd69960f696918eea6b

    • SHA1

      4be5e3a983883eb88e64da1f038af6db28819a71

    • SHA256

      c2ce52383f715276fe19937f786f3e5e18ba90595dd0f93f0f80cebb74f21e5e

    • SHA512

      ad4866f6ce1252fc5c447a81fa7777b80c53a28a608fb326142ef49dc95d88aa4c9442acf3e5e3219114a354bcb0b43eab8f78acf7b3319562a5b70e49afd9ab

    • SSDEEP

      6144:GXIIniK26pIt6XkKGiw7CVaa9yd6KmqfR:YNniK26St6Xkyw259yduqfR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks