General

  • Target

    2472ac8fca4d6c15bbe9174546b155ed7b78a7829801d1e96c6a94516f740e85

  • Size

    404KB

  • Sample

    241110-s3ve2ayqdy

  • MD5

    9fabd2939ae6c074e02418dced15ab82

  • SHA1

    815498ab51487f2dce7a74961e11200144746a30

  • SHA256

    2472ac8fca4d6c15bbe9174546b155ed7b78a7829801d1e96c6a94516f740e85

  • SHA512

    d09a07e8fbeea0a84be1f3d40deac16b0504a7331176669807b469ee624fd597be7bf9a64d71e2cd49e297cf78fafbe4104656232908cb96e40586cfc7636d16

  • SSDEEP

    6144:0b3cpiYUeQXq9LmJ2W02SnFCP04ofou9bpuN7ITsq3:0zczwXq9k0HgPzoQulgN7e

Malware Config

Extracted

Family

redline

Botnet

SEWPALPADIN

C2

45.9.20.112:57175

Attributes
  • auth_value

    5690233e096f92772f1ad7a4afefede9

Targets

    • Target

      2472ac8fca4d6c15bbe9174546b155ed7b78a7829801d1e96c6a94516f740e85

    • Size

      404KB

    • MD5

      9fabd2939ae6c074e02418dced15ab82

    • SHA1

      815498ab51487f2dce7a74961e11200144746a30

    • SHA256

      2472ac8fca4d6c15bbe9174546b155ed7b78a7829801d1e96c6a94516f740e85

    • SHA512

      d09a07e8fbeea0a84be1f3d40deac16b0504a7331176669807b469ee624fd597be7bf9a64d71e2cd49e297cf78fafbe4104656232908cb96e40586cfc7636d16

    • SSDEEP

      6144:0b3cpiYUeQXq9LmJ2W02SnFCP04ofou9bpuN7ITsq3:0zczwXq9k0HgPzoQulgN7e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks