General

  • Target

    b7d1af3d4eed6d0652021d2d9b317519e21a9f15b470c8f06ebb73c5b813b268

  • Size

    457KB

  • Sample

    241111-gfsgdatgjp

  • MD5

    480f9bedc8a95771da253c1360872a30

  • SHA1

    b0f90af6c8c363f0edff502e2b4fe9ee586e6842

  • SHA256

    b7d1af3d4eed6d0652021d2d9b317519e21a9f15b470c8f06ebb73c5b813b268

  • SHA512

    cb23f3a4e4371a1fbc97f291aa70ae46e6e3c1ffb3ec496cf624db9a7aec99a330478100cda93505ccaf7096248b75613ed295305b406897e9d5b5365de5d179

  • SSDEEP

    6144:YscI2xoKoQQOEZtqLQyLFDabYnOlaZRKUh95x+O97ITsqYigavwVfG:YscFTQOE/qrebrlaZ4WxJ7u7

Malware Config

Extracted

Family

redline

Botnet

SEWPALPADIN

C2

45.9.20.112:57175

Attributes
  • auth_value

    5690233e096f92772f1ad7a4afefede9

Targets

    • Target

      b7d1af3d4eed6d0652021d2d9b317519e21a9f15b470c8f06ebb73c5b813b268

    • Size

      457KB

    • MD5

      480f9bedc8a95771da253c1360872a30

    • SHA1

      b0f90af6c8c363f0edff502e2b4fe9ee586e6842

    • SHA256

      b7d1af3d4eed6d0652021d2d9b317519e21a9f15b470c8f06ebb73c5b813b268

    • SHA512

      cb23f3a4e4371a1fbc97f291aa70ae46e6e3c1ffb3ec496cf624db9a7aec99a330478100cda93505ccaf7096248b75613ed295305b406897e9d5b5365de5d179

    • SSDEEP

      6144:YscI2xoKoQQOEZtqLQyLFDabYnOlaZRKUh95x+O97ITsqYigavwVfG:YscFTQOE/qrebrlaZ4WxJ7u7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks