General

  • Target

    edfd1d0f390364896c279079beb757a6efa7190745b7997acff799e19f84c83b.exe

  • Size

    399KB

  • Sample

    241111-cyyc5a1cpe

  • MD5

    45db2d24d5a0069e985c8312a1be3a16

  • SHA1

    0600762ffed0b6d015cf9f8383121334895d8524

  • SHA256

    edfd1d0f390364896c279079beb757a6efa7190745b7997acff799e19f84c83b

  • SHA512

    1cd89952edb6aad4133cb1e7a7b060230847c8fc324cd52a79e1e96182460077bf9241a0d188b7093696fef4eae82d85bbd5283621a4ae15cabfd97ceae55805

  • SSDEEP

    6144:0MayRGL+B61DRI+Dq90J8q+JQ+O7frv/N0fCfd:0JyRGCcDRI+Dq90tIQ+G1

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      edfd1d0f390364896c279079beb757a6efa7190745b7997acff799e19f84c83b.exe

    • Size

      399KB

    • MD5

      45db2d24d5a0069e985c8312a1be3a16

    • SHA1

      0600762ffed0b6d015cf9f8383121334895d8524

    • SHA256

      edfd1d0f390364896c279079beb757a6efa7190745b7997acff799e19f84c83b

    • SHA512

      1cd89952edb6aad4133cb1e7a7b060230847c8fc324cd52a79e1e96182460077bf9241a0d188b7093696fef4eae82d85bbd5283621a4ae15cabfd97ceae55805

    • SSDEEP

      6144:0MayRGL+B61DRI+Dq90J8q+JQ+O7frv/N0fCfd:0JyRGCcDRI+Dq90tIQ+G1

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks