General

  • Target

    aff27df17f52c1be13181276e7c7e9db758fa0b9f7808fdc3a4c6812745a9a03.exe

  • Size

    857KB

  • Sample

    241123-bmpfeatqa1

  • MD5

    19a01fe1b48f909bef5b8e6e7a2cd705

  • SHA1

    bf79743bcc78b1a2206ceb36b2bd19eea6c65d14

  • SHA256

    aff27df17f52c1be13181276e7c7e9db758fa0b9f7808fdc3a4c6812745a9a03

  • SHA512

    7ef3322ed3791fd1519e4d2579c4d4a1f94f4155fac90d65fdef08790b3b17e648338bc47c754d218d32d51a94a61b1ebc0aff2cfad9974a3aa2bd7ac9300502

  • SSDEEP

    12288:WwdxXrGUAwh7guaSD5cG11bPxswsScDUja2kDGOXisFAncl79Xr2COrMp:XdxXLdgSGG1tPxsffKfu71We

Malware Config

Extracted

Family

redline

Botnet

@F0lser

C2

5.188.118.163:80

Attributes
  • auth_value

    9bde7608ef33d6cbd8c01687cdd53196

Targets

    • Target

      aff27df17f52c1be13181276e7c7e9db758fa0b9f7808fdc3a4c6812745a9a03.exe

    • Size

      857KB

    • MD5

      19a01fe1b48f909bef5b8e6e7a2cd705

    • SHA1

      bf79743bcc78b1a2206ceb36b2bd19eea6c65d14

    • SHA256

      aff27df17f52c1be13181276e7c7e9db758fa0b9f7808fdc3a4c6812745a9a03

    • SHA512

      7ef3322ed3791fd1519e4d2579c4d4a1f94f4155fac90d65fdef08790b3b17e648338bc47c754d218d32d51a94a61b1ebc0aff2cfad9974a3aa2bd7ac9300502

    • SSDEEP

      12288:WwdxXrGUAwh7guaSD5cG11bPxswsScDUja2kDGOXisFAncl79Xr2COrMp:XdxXLdgSGG1tPxsffKfu71We

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks