General

  • Target

    7f0cd62dc19b819e223d55da7372410ef7d8a195a7846b54d164e3d35919245e.exe

  • Size

    452KB

  • Sample

    241122-n7ah7swmbr

  • MD5

    4781d9056fd726c36d46df57cbb5f288

  • SHA1

    cce4567213b2157f0bdca2da5a2a7da128a9143e

  • SHA256

    7f0cd62dc19b819e223d55da7372410ef7d8a195a7846b54d164e3d35919245e

  • SHA512

    679302a5ee2808afba0cde1ed3d95d8cc101c9f86a4a736f76c4d74e0d60c324cf349fbb85f6c18a500106830b5ef39435c3357f682e50b1a88b4a4ea5527ebd

  • SSDEEP

    12288:Op44B9zBU7i3CvYsKcz/XD2zDxL6gFLxj3A:OP99U0CvYxmuDJ6gd+

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      7f0cd62dc19b819e223d55da7372410ef7d8a195a7846b54d164e3d35919245e.exe

    • Size

      452KB

    • MD5

      4781d9056fd726c36d46df57cbb5f288

    • SHA1

      cce4567213b2157f0bdca2da5a2a7da128a9143e

    • SHA256

      7f0cd62dc19b819e223d55da7372410ef7d8a195a7846b54d164e3d35919245e

    • SHA512

      679302a5ee2808afba0cde1ed3d95d8cc101c9f86a4a736f76c4d74e0d60c324cf349fbb85f6c18a500106830b5ef39435c3357f682e50b1a88b4a4ea5527ebd

    • SSDEEP

      12288:Op44B9zBU7i3CvYsKcz/XD2zDxL6gFLxj3A:OP99U0CvYxmuDJ6gd+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks