General

  • Target

    b0d7fc192193b42887b18b2e68429fbd53c8c80d9cc07faf20418d27d8d70790.exe

  • Size

    396KB

  • Sample

    241111-cn1qha1aqg

  • MD5

    a947b9e1bddf1777e1cbce269f41b106

  • SHA1

    b16172ac295bb70f6d61301d01a40c010114ad2b

  • SHA256

    b0d7fc192193b42887b18b2e68429fbd53c8c80d9cc07faf20418d27d8d70790

  • SHA512

    0a345763c5784c51a272eaeab83aceb9093a116883397483ba5ca731167550f2d759fef5cf63e84cb6e7cbaee1ec5fb6259b7cb6c06468ca4aa45bbf10281995

  • SSDEEP

    6144:K5ALo/V8fOsSH4Pu88U0WZL3jeXrhUFQiMQkhe8UQ8:K5Ak/VUSH4Pd8UpL3jSCFdM3hM

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      b0d7fc192193b42887b18b2e68429fbd53c8c80d9cc07faf20418d27d8d70790.exe

    • Size

      396KB

    • MD5

      a947b9e1bddf1777e1cbce269f41b106

    • SHA1

      b16172ac295bb70f6d61301d01a40c010114ad2b

    • SHA256

      b0d7fc192193b42887b18b2e68429fbd53c8c80d9cc07faf20418d27d8d70790

    • SHA512

      0a345763c5784c51a272eaeab83aceb9093a116883397483ba5ca731167550f2d759fef5cf63e84cb6e7cbaee1ec5fb6259b7cb6c06468ca4aa45bbf10281995

    • SSDEEP

      6144:K5ALo/V8fOsSH4Pu88U0WZL3jeXrhUFQiMQkhe8UQ8:K5Ak/VUSH4Pd8UpL3jSCFdM3hM

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks