General

  • Target

    dadffab41ec96af2366f3edde6d1beacc66d4bcb4d76f11dbb882f8656695069N.exe

  • Size

    399KB

  • Sample

    241111-jxww8swcqn

  • MD5

    e4e71e45fecbe8bece87fc2a082faa6d

  • SHA1

    0752058307cc192499c0ddf1dc45f9c2b27b1336

  • SHA256

    2c0cad1a6f03771cd1bcad7622c06cadb8a38ffc31992582224893c168c09f27

  • SHA512

    8d10e529979f1bec28be23244fdacf507f127b341204e5a35398dad7dd809f32ed34cc96f136cd6fe7f87f22839a1a420552ed55f06a8e970eb0fd1f07010adf

  • SSDEEP

    6144:VBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9M:V9x133FU0hCcYSdU0weK5M

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      dadffab41ec96af2366f3edde6d1beacc66d4bcb4d76f11dbb882f8656695069N.exe

    • Size

      399KB

    • MD5

      e4e71e45fecbe8bece87fc2a082faa6d

    • SHA1

      0752058307cc192499c0ddf1dc45f9c2b27b1336

    • SHA256

      2c0cad1a6f03771cd1bcad7622c06cadb8a38ffc31992582224893c168c09f27

    • SHA512

      8d10e529979f1bec28be23244fdacf507f127b341204e5a35398dad7dd809f32ed34cc96f136cd6fe7f87f22839a1a420552ed55f06a8e970eb0fd1f07010adf

    • SSDEEP

      6144:VBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9M:V9x133FU0hCcYSdU0weK5M

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks