General

  • Target

    6ffc50800187d536cfebbdd0dddbdd2523705ec90a7e5ba236be51377a9f3a95

  • Size

    399KB

  • Sample

    241112-3ggxxswnhn

  • MD5

    1f5a6f7a1db8e9bf689e9c7e436cf96e

  • SHA1

    bd123f5b0fa8f205925d0e33e5022bb8b8d1e911

  • SHA256

    6ffc50800187d536cfebbdd0dddbdd2523705ec90a7e5ba236be51377a9f3a95

  • SHA512

    3e908fcb4dcb6c91c3a99d5c81a38b0ccf277036e4ddbae2197850ca1a28226a738ac2772e17a822a441a7dbc528be5b7ad084ae7b9a48d8abe7d791757db6e0

  • SSDEEP

    6144:gBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9:g9x133FU0hCcYSdU0weK5

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      6ffc50800187d536cfebbdd0dddbdd2523705ec90a7e5ba236be51377a9f3a95

    • Size

      399KB

    • MD5

      1f5a6f7a1db8e9bf689e9c7e436cf96e

    • SHA1

      bd123f5b0fa8f205925d0e33e5022bb8b8d1e911

    • SHA256

      6ffc50800187d536cfebbdd0dddbdd2523705ec90a7e5ba236be51377a9f3a95

    • SHA512

      3e908fcb4dcb6c91c3a99d5c81a38b0ccf277036e4ddbae2197850ca1a28226a738ac2772e17a822a441a7dbc528be5b7ad084ae7b9a48d8abe7d791757db6e0

    • SSDEEP

      6144:gBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9:g9x133FU0hCcYSdU0weK5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks