General

  • Target

    51bd7be7a99d7cc4134eae28391c36d207ec52d2d52ec1d506c166a0fd2613fe

  • Size

    372KB

  • Sample

    241111-c3bpxs1dmg

  • MD5

    bf88096cffa97d53cfe2553ae913c25f

  • SHA1

    190b64b40c0e104069e8f5db1070fbf117fe45e7

  • SHA256

    51bd7be7a99d7cc4134eae28391c36d207ec52d2d52ec1d506c166a0fd2613fe

  • SHA512

    3246990476bec4f3f6bdf5c66be9bb1ba3dfe1a8d93ed4aa2232f7a17cc743e7d7bb4d49332335c817ef0efdbec2d39adf4cdba1dc031020d241cdd47db63f73

  • SSDEEP

    6144:Sqbof/hxLmTW6fA36KOanvZuahUVxHwCU:NbonhxqTWL36KFBhUVxHn

Malware Config

Extracted

Family

redline

Botnet

ww

C2

193.106.191.67:44400

Attributes
  • auth_value

    5a1b28ccd05953f5c3f99729c12427cc

Targets

    • Target

      51bd7be7a99d7cc4134eae28391c36d207ec52d2d52ec1d506c166a0fd2613fe

    • Size

      372KB

    • MD5

      bf88096cffa97d53cfe2553ae913c25f

    • SHA1

      190b64b40c0e104069e8f5db1070fbf117fe45e7

    • SHA256

      51bd7be7a99d7cc4134eae28391c36d207ec52d2d52ec1d506c166a0fd2613fe

    • SHA512

      3246990476bec4f3f6bdf5c66be9bb1ba3dfe1a8d93ed4aa2232f7a17cc743e7d7bb4d49332335c817ef0efdbec2d39adf4cdba1dc031020d241cdd47db63f73

    • SSDEEP

      6144:Sqbof/hxLmTW6fA36KOanvZuahUVxHwCU:NbonhxqTWL36KFBhUVxHn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks