General

  • Target

    aa4b2ad91850702a532f142c2d0ef9abafcf9d40b01ca8b709d727c3dac5d7d2

  • Size

    283KB

  • Sample

    241111-ck6scazjex

  • MD5

    b27dfcc53e4329d90dbfbf47b906ae0b

  • SHA1

    eafe43310dbe347c8da52ee06012f397033b2df0

  • SHA256

    aa4b2ad91850702a532f142c2d0ef9abafcf9d40b01ca8b709d727c3dac5d7d2

  • SHA512

    a1fe443a95939bd637be7d5e24d6c1e6cd40497308e163a96df21bf84d2b02d7ef0f7ff67c3ee0e84e2722a7704e9ed75812b53fdc065a430707b449caf90079

  • SSDEEP

    6144:j3kHQAcPCqXuprR4N1YD+Zs+BTfFyHcT/kvGhvJ:j3kBWCjrR4BJfF8cbkvG

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      aa4b2ad91850702a532f142c2d0ef9abafcf9d40b01ca8b709d727c3dac5d7d2

    • Size

      283KB

    • MD5

      b27dfcc53e4329d90dbfbf47b906ae0b

    • SHA1

      eafe43310dbe347c8da52ee06012f397033b2df0

    • SHA256

      aa4b2ad91850702a532f142c2d0ef9abafcf9d40b01ca8b709d727c3dac5d7d2

    • SHA512

      a1fe443a95939bd637be7d5e24d6c1e6cd40497308e163a96df21bf84d2b02d7ef0f7ff67c3ee0e84e2722a7704e9ed75812b53fdc065a430707b449caf90079

    • SSDEEP

      6144:j3kHQAcPCqXuprR4N1YD+Zs+BTfFyHcT/kvGhvJ:j3kBWCjrR4BJfF8cbkvG

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks