General

  • Target

    eace4074f4c0735b49c111e98fed9b6ae9f0efb4

  • Size

    404KB

  • Sample

    241111-c8243atrhq

  • MD5

    3170b6806eb49f5fa6daafc2b7aba1f1

  • SHA1

    eace4074f4c0735b49c111e98fed9b6ae9f0efb4

  • SHA256

    cde607280de0a4f652cd31ffbcffe6e5f1392e22628637dc293f8def12156456

  • SHA512

    8e1c9427c45bb906d78f21f9191a483650cfdbae01046ba8e07316a776e5803a4baf3ecdb975484a6316e608e953438a998d098df43555c1d2b6109835417125

  • SSDEEP

    6144:5jcn5PYCsjhb2qKSEPHYqwSJUHHDHHqWkLc7Db79B4skS7ITsq3:5jcdrsjoqKPYqwSJUHjug9B4sF7e

Malware Config

Extracted

Family

redline

Botnet

SEWPALPADIN

C2

45.9.20.112:57175

Attributes
  • auth_value

    5690233e096f92772f1ad7a4afefede9

Targets

    • Target

      eace4074f4c0735b49c111e98fed9b6ae9f0efb4

    • Size

      404KB

    • MD5

      3170b6806eb49f5fa6daafc2b7aba1f1

    • SHA1

      eace4074f4c0735b49c111e98fed9b6ae9f0efb4

    • SHA256

      cde607280de0a4f652cd31ffbcffe6e5f1392e22628637dc293f8def12156456

    • SHA512

      8e1c9427c45bb906d78f21f9191a483650cfdbae01046ba8e07316a776e5803a4baf3ecdb975484a6316e608e953438a998d098df43555c1d2b6109835417125

    • SSDEEP

      6144:5jcn5PYCsjhb2qKSEPHYqwSJUHHDHHqWkLc7Db79B4skS7ITsq3:5jcdrsjoqKPYqwSJUHjug9B4sF7e

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks