General

  • Target

    e11b504b197207c59b3092aeb53e17eb60bd0fe91dec6818166dfbd81d10a808N

  • Size

    297KB

  • Sample

    241111-zjnayavnbt

  • MD5

    ac6de71e44b237d587d9588d5a724900

  • SHA1

    45aaaf8fc2e0836739d96ad47686b6cec12c1b68

  • SHA256

    e11b504b197207c59b3092aeb53e17eb60bd0fe91dec6818166dfbd81d10a808

  • SHA512

    592114df67e6c44c8e1e41dc97ad0c25ce4e24d4af112a1996775e382908315e46995ebbfcf3fa132818c02575ba71ee0090cbebc96c0bc22fed4c48a6283fdc

  • SSDEEP

    6144:nPgvNJua3AuNvayvt4nYxgUGhIW8MaQa:Pgvma3kyvOYxOWW8VQa

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      e11b504b197207c59b3092aeb53e17eb60bd0fe91dec6818166dfbd81d10a808N

    • Size

      297KB

    • MD5

      ac6de71e44b237d587d9588d5a724900

    • SHA1

      45aaaf8fc2e0836739d96ad47686b6cec12c1b68

    • SHA256

      e11b504b197207c59b3092aeb53e17eb60bd0fe91dec6818166dfbd81d10a808

    • SHA512

      592114df67e6c44c8e1e41dc97ad0c25ce4e24d4af112a1996775e382908315e46995ebbfcf3fa132818c02575ba71ee0090cbebc96c0bc22fed4c48a6283fdc

    • SSDEEP

      6144:nPgvNJua3AuNvayvt4nYxgUGhIW8MaQa:Pgvma3kyvOYxOWW8VQa

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks