General

  • Target

    d36fc7cc5e39090c25293cfcb7f6a169

  • Size

    365KB

  • Sample

    241111-g6kt8atnct

  • MD5

    d36fc7cc5e39090c25293cfcb7f6a169

  • SHA1

    828b607017225dbe91483b98d7640ebb106fc7b8

  • SHA256

    dc6ab2d39b66aeb2292fd6d29bd6196182a9e6912c9fd87df2c9727b2e513667

  • SHA512

    a241c0aab4b4869fc62f16d97e4728ba9c94f9e292763b19b4af4be870bdc8148c853f6f48c20397e8974f7de902124a9bf36a942050cc4fbc29b0d3826177f0

  • SSDEEP

    6144:Hdj5zKWOSW3i+g+FKfuFFPQqfcIeWYPufjI/XGE+OSCkQHoPbB8so:HjKWNh+g+FhRQqWWA+ekQIP

Malware Config

Extracted

Family

redline

Botnet

SewPalpadin

C2

193.233.48.58:38989

Attributes
  • auth_value

    7a741aa449c2131b60755b6dc189af74

Targets

    • Target

      d36fc7cc5e39090c25293cfcb7f6a169

    • Size

      365KB

    • MD5

      d36fc7cc5e39090c25293cfcb7f6a169

    • SHA1

      828b607017225dbe91483b98d7640ebb106fc7b8

    • SHA256

      dc6ab2d39b66aeb2292fd6d29bd6196182a9e6912c9fd87df2c9727b2e513667

    • SHA512

      a241c0aab4b4869fc62f16d97e4728ba9c94f9e292763b19b4af4be870bdc8148c853f6f48c20397e8974f7de902124a9bf36a942050cc4fbc29b0d3826177f0

    • SSDEEP

      6144:Hdj5zKWOSW3i+g+FKfuFFPQqfcIeWYPufjI/XGE+OSCkQHoPbB8so:HjKWNh+g+FhRQqWWA+ekQIP

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks