General

  • Target

    c8d74f887007ce1db24babf48101fbdbc70fb596da35ec1a2017d77b6acf94e5.exe

  • Size

    452KB

  • Sample

    241123-c16saawlfz

  • MD5

    5252cd66b7d68e0221452a567da5f59a

  • SHA1

    e7fa25e9c2de4cf6a68eb8cfe683e6222af763ab

  • SHA256

    c8d74f887007ce1db24babf48101fbdbc70fb596da35ec1a2017d77b6acf94e5

  • SHA512

    5447ae35af2c50a891399e3a4f60f924adc5c4b8f6c4ae85ae4544723910c292ed12c74794b5dff8bdac3debf4913d266c4068667dda1962d79a55058a7d8be7

  • SSDEEP

    12288:rHpzNniEEkBmKxUEkrPDiBDRO7V4TGezRt:rxF/P8KxEADM7Volt

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      c8d74f887007ce1db24babf48101fbdbc70fb596da35ec1a2017d77b6acf94e5.exe

    • Size

      452KB

    • MD5

      5252cd66b7d68e0221452a567da5f59a

    • SHA1

      e7fa25e9c2de4cf6a68eb8cfe683e6222af763ab

    • SHA256

      c8d74f887007ce1db24babf48101fbdbc70fb596da35ec1a2017d77b6acf94e5

    • SHA512

      5447ae35af2c50a891399e3a4f60f924adc5c4b8f6c4ae85ae4544723910c292ed12c74794b5dff8bdac3debf4913d266c4068667dda1962d79a55058a7d8be7

    • SSDEEP

      12288:rHpzNniEEkBmKxUEkrPDiBDRO7V4TGezRt:rxF/P8KxEADM7Volt

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks