General

  • Target

    dadffab41ec96af2366f3edde6d1beacc66d4bcb4d76f11dbb882f8656695069N

  • Size

    399KB

  • Sample

    241112-a41dka1bmc

  • MD5

    31274c4ca15bde8dfa7f0b5986cec610

  • SHA1

    a7bd2ec9b4d0e4d602fb415ea845921de1a0ed7e

  • SHA256

    dadffab41ec96af2366f3edde6d1beacc66d4bcb4d76f11dbb882f8656695069

  • SHA512

    1fddccde37eff8d8c93a4aa7fe987d8a1cb97d08b55e0363511353ce6389fbab4a49eddba4e49a36fbf2dd2c103c08a374958470d26bb2c36480c31234528e95

  • SSDEEP

    6144:VBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9:V9x133FU0hCcYSdU0weK5

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      dadffab41ec96af2366f3edde6d1beacc66d4bcb4d76f11dbb882f8656695069N

    • Size

      399KB

    • MD5

      31274c4ca15bde8dfa7f0b5986cec610

    • SHA1

      a7bd2ec9b4d0e4d602fb415ea845921de1a0ed7e

    • SHA256

      dadffab41ec96af2366f3edde6d1beacc66d4bcb4d76f11dbb882f8656695069

    • SHA512

      1fddccde37eff8d8c93a4aa7fe987d8a1cb97d08b55e0363511353ce6389fbab4a49eddba4e49a36fbf2dd2c103c08a374958470d26bb2c36480c31234528e95

    • SSDEEP

      6144:VBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9:V9x133FU0hCcYSdU0weK5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks