General

  • Target

    c885de93f1fcb75dc88609898d8337bdad6bc82a988e04a607b2dfc35860c4b3.exe

  • Size

    284KB

  • Sample

    241111-tbclks1dkn

  • MD5

    40c3b8540fd0549bc1bcf577999d9c63

  • SHA1

    bcc0a273dde9023bcc114b0625a6c1a4cb5585de

  • SHA256

    c885de93f1fcb75dc88609898d8337bdad6bc82a988e04a607b2dfc35860c4b3

  • SHA512

    01c0f57c04906601cf67c0118f8bc382ae4b73195f24907e515b9a55d8c8fb3e99bd6bb6d14205e65c3645854c540aeac84413268e2d3487f2ddb5cb8a1556c8

  • SSDEEP

    6144:0RhInZ8uX1g+hG9r6hBy0byxvf5/N/yNwvj1:0RhwBX1HkmB6x5x

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      c885de93f1fcb75dc88609898d8337bdad6bc82a988e04a607b2dfc35860c4b3.exe

    • Size

      284KB

    • MD5

      40c3b8540fd0549bc1bcf577999d9c63

    • SHA1

      bcc0a273dde9023bcc114b0625a6c1a4cb5585de

    • SHA256

      c885de93f1fcb75dc88609898d8337bdad6bc82a988e04a607b2dfc35860c4b3

    • SHA512

      01c0f57c04906601cf67c0118f8bc382ae4b73195f24907e515b9a55d8c8fb3e99bd6bb6d14205e65c3645854c540aeac84413268e2d3487f2ddb5cb8a1556c8

    • SSDEEP

      6144:0RhInZ8uX1g+hG9r6hBy0byxvf5/N/yNwvj1:0RhwBX1HkmB6x5x

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks