General

  • Target

    2a3ad7cb9d592c2c29a4cf933a77c651423bccf8171eeb5d1d8f55d54f090947

  • Size

    296KB

  • Sample

    241111-zhyqaawcpn

  • MD5

    3e39a6692bd639115e4405549576f659

  • SHA1

    457a7814c0d22fd1aafe2e4e24528ec40513e85d

  • SHA256

    2a3ad7cb9d592c2c29a4cf933a77c651423bccf8171eeb5d1d8f55d54f090947

  • SHA512

    aa5e50d591be5e1ec46b3fcd8cde2626d93910310730700021ad087ed1c911ea4cc0d0b95cde90093da3cab28902225985f789a26f7b8effb5f1a9ab7d8d1ddf

  • SSDEEP

    6144:rqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O:rqa5/ZU9EvlyA2aWv

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      2a3ad7cb9d592c2c29a4cf933a77c651423bccf8171eeb5d1d8f55d54f090947

    • Size

      296KB

    • MD5

      3e39a6692bd639115e4405549576f659

    • SHA1

      457a7814c0d22fd1aafe2e4e24528ec40513e85d

    • SHA256

      2a3ad7cb9d592c2c29a4cf933a77c651423bccf8171eeb5d1d8f55d54f090947

    • SHA512

      aa5e50d591be5e1ec46b3fcd8cde2626d93910310730700021ad087ed1c911ea4cc0d0b95cde90093da3cab28902225985f789a26f7b8effb5f1a9ab7d8d1ddf

    • SSDEEP

      6144:rqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O:rqa5/ZU9EvlyA2aWv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks