General

  • Target

    825c4fcac88cddfa3f765a67ae297ae485d045ae7e3d2ffe2521fe8ca10f5478.exe

  • Size

    441KB

  • Sample

    241122-m3rq9ayrdv

  • MD5

    5481dbb8d5b84f140816c8d2e0790e29

  • SHA1

    6bbee7b0684be92f285e5d3088108ddac1c6825c

  • SHA256

    825c4fcac88cddfa3f765a67ae297ae485d045ae7e3d2ffe2521fe8ca10f5478

  • SHA512

    bd7c08f986311b876647e207a5febcd4466010d00e6c1dea16a2db41492d416adf963a27a80ff6684cedac82d5a922dbfae1412c743707609f787d4edff15053

  • SSDEEP

    12288:K9/luXNmTRS3sKRAZlXOEFmqXH8vPtq3wVA7+euH:K7udmlSzRCXcvP03wW0H

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      825c4fcac88cddfa3f765a67ae297ae485d045ae7e3d2ffe2521fe8ca10f5478.exe

    • Size

      441KB

    • MD5

      5481dbb8d5b84f140816c8d2e0790e29

    • SHA1

      6bbee7b0684be92f285e5d3088108ddac1c6825c

    • SHA256

      825c4fcac88cddfa3f765a67ae297ae485d045ae7e3d2ffe2521fe8ca10f5478

    • SHA512

      bd7c08f986311b876647e207a5febcd4466010d00e6c1dea16a2db41492d416adf963a27a80ff6684cedac82d5a922dbfae1412c743707609f787d4edff15053

    • SSDEEP

      12288:K9/luXNmTRS3sKRAZlXOEFmqXH8vPtq3wVA7+euH:K7udmlSzRCXcvP03wW0H

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks