General

  • Target

    fb73ca10febb0d43d67ce017245adce5446786e21b50933e4528f0abd907099e.exe

  • Size

    295KB

  • Sample

    241111-c8bbcatrfn

  • MD5

    6344d8ea772dbb7bf49bde8fab6172fb

  • SHA1

    68b16a0cfde64ceda6fe3f812950f48936713af8

  • SHA256

    fb73ca10febb0d43d67ce017245adce5446786e21b50933e4528f0abd907099e

  • SHA512

    9e6d8c567caab62eb9df95ed99d06a19582946fd421ed599da6dd33fcd01970c8b06920fc06c50f055f64728d7c8d474128af8a76c839f71ecac18dbf49aab74

  • SSDEEP

    6144:4nRzTgJjqjpZnUYmJGX9yqheRnrEXB/05C:MRzMOlZnUV4X9yaeRrEXmk

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      fb73ca10febb0d43d67ce017245adce5446786e21b50933e4528f0abd907099e.exe

    • Size

      295KB

    • MD5

      6344d8ea772dbb7bf49bde8fab6172fb

    • SHA1

      68b16a0cfde64ceda6fe3f812950f48936713af8

    • SHA256

      fb73ca10febb0d43d67ce017245adce5446786e21b50933e4528f0abd907099e

    • SHA512

      9e6d8c567caab62eb9df95ed99d06a19582946fd421ed599da6dd33fcd01970c8b06920fc06c50f055f64728d7c8d474128af8a76c839f71ecac18dbf49aab74

    • SSDEEP

      6144:4nRzTgJjqjpZnUYmJGX9yqheRnrEXB/05C:MRzMOlZnUV4X9yaeRrEXmk

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks