General

  • Target

    d5d6b9e8ed11861a1df1820ed8d9ba59c90c1ca2ac4cbc90b72579acbb063c65

  • Size

    295KB

  • Sample

    241112-d9hx9athpq

  • MD5

    367421731a5d1b069ac9f135dbfb28e9

  • SHA1

    8fad9a794586a5aec04f7393bf47ab0e48e8bccf

  • SHA256

    d5d6b9e8ed11861a1df1820ed8d9ba59c90c1ca2ac4cbc90b72579acbb063c65

  • SHA512

    5af908612fb404bb9df6c444e20f7fc0e133f68fbe7706e5bba3f1f10214cf6276944f5628d5140424dbbf45047c96227681d5f01b362a3941a29b34ed921f22

  • SSDEEP

    6144:XnRzTgJjqjpZnUYmJGX9yqheRnrEXB/05:3RzMOlZnUV4X9yaeRrEXm

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      d5d6b9e8ed11861a1df1820ed8d9ba59c90c1ca2ac4cbc90b72579acbb063c65

    • Size

      295KB

    • MD5

      367421731a5d1b069ac9f135dbfb28e9

    • SHA1

      8fad9a794586a5aec04f7393bf47ab0e48e8bccf

    • SHA256

      d5d6b9e8ed11861a1df1820ed8d9ba59c90c1ca2ac4cbc90b72579acbb063c65

    • SHA512

      5af908612fb404bb9df6c444e20f7fc0e133f68fbe7706e5bba3f1f10214cf6276944f5628d5140424dbbf45047c96227681d5f01b362a3941a29b34ed921f22

    • SSDEEP

      6144:XnRzTgJjqjpZnUYmJGX9yqheRnrEXB/05:3RzMOlZnUV4X9yaeRrEXm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks