General

  • Target

    7631527319e835ceb2587b44e715bbc6bb32cf7e4b1d99e46cbebc15008353e4.exe

  • Size

    452KB

  • Sample

    241123-wjhtnsvrbk

  • MD5

    4adb9e027f2110db760c47e2b025e172

  • SHA1

    ed2a2ec388f5b6f22f85aef543a16c602b7daad5

  • SHA256

    7631527319e835ceb2587b44e715bbc6bb32cf7e4b1d99e46cbebc15008353e4

  • SHA512

    a09a656aa3a410cbdfba598dc5cc51cb29fd16dde6ae9fb8ae7314f5b1d5fb77ba807b85b11c94cb01d48259e7c205be9ac93ac24087b853f3f68abb9336b1b2

  • SSDEEP

    12288:iBm0n4cdPaRwpunDuD1mvG97jmR7MUWOzQk:iBnDdiepunggYjw7MZ2

Malware Config

Extracted

Family

redline

Botnet

paladin

C2

193.150.103.37:29118

Attributes
  • auth_value

    f27db372188045eefdf974196ead3dae

Targets

    • Target

      7631527319e835ceb2587b44e715bbc6bb32cf7e4b1d99e46cbebc15008353e4.exe

    • Size

      452KB

    • MD5

      4adb9e027f2110db760c47e2b025e172

    • SHA1

      ed2a2ec388f5b6f22f85aef543a16c602b7daad5

    • SHA256

      7631527319e835ceb2587b44e715bbc6bb32cf7e4b1d99e46cbebc15008353e4

    • SHA512

      a09a656aa3a410cbdfba598dc5cc51cb29fd16dde6ae9fb8ae7314f5b1d5fb77ba807b85b11c94cb01d48259e7c205be9ac93ac24087b853f3f68abb9336b1b2

    • SSDEEP

      12288:iBm0n4cdPaRwpunDuD1mvG97jmR7MUWOzQk:iBnDdiepunggYjw7MZ2

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks