Overview

overview

10

Static

static

3

c6fb150e89...fb.exe

windows7-x64

10

c6fb150e89...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6fb150e8994f65827aae374d044a96b18581026cf0b74ce37239cf55461bffb

  • Size

    283KB

  • Sample

    240319-lkv6aagd44

  • MD5

    f63bb9145a620f420643ff58fb9be731

  • SHA1

    8956e280b260d95a95846f20d66b23ef610509c6

  • SHA256

    c6fb150e8994f65827aae374d044a96b18581026cf0b74ce37239cf55461bffb

  • SHA512

    cb7debffbe971615de462151e2ed44530055ba2305797d24ef0cdf467af746ea815469bbf9577baf62c388fe31ac1590bf2f60ce620775205999326b6d7bcf45

  • SSDEEP

    6144:37c3s+plgJAGslW9d4d5gJ4kHFjGzPiK0WORfQNhVJ:37c3ssfRgJTFSWK0W/N

Score
10/10
redlinemangoinfostealer

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      c6fb150e8994f65827aae374d044a96b18581026cf0b74ce37239cf55461bffb

    • Size

      283KB

    • MD5

      f63bb9145a620f420643ff58fb9be731

    • SHA1

      8956e280b260d95a95846f20d66b23ef610509c6

    • SHA256

      c6fb150e8994f65827aae374d044a96b18581026cf0b74ce37239cf55461bffb

    • SHA512

      cb7debffbe971615de462151e2ed44530055ba2305797d24ef0cdf467af746ea815469bbf9577baf62c388fe31ac1590bf2f60ce620775205999326b6d7bcf45

    • SSDEEP

      6144:37c3s+plgJAGslW9d4d5gJ4kHFjGzPiK0WORfQNhVJ:37c3ssfRgJTFSWK0W/N

    Score
    10/10
    redlinemangoinfostealer

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

      infostealerredline

    • RedLine payload

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks