General

  • Target

    b1fd167838c1b088ce62532d2539e6b933e8b527fcfbcb532957323ec5b03d9bN.exe

  • Size

    408KB

  • Sample

    241112-e3bq2aveqq

  • MD5

    c01d45e57a91a79911c2573da07d1d06

  • SHA1

    81125de761dc7e768896f4555bd438eca6a2d738

  • SHA256

    7d9ff5fe3c0b45f942daf435a77cc0e87b5b9e1f511beaf30c51ced20a5d3a66

  • SHA512

    35f19e8734c3bd792bca11dce7670743bb45fc05b4a0c072937bc08d6bb4d5e80dfb81de5fd45dc45cb5b71b9b40d110b6bdcb51fef51ee308536b1f014128b2

  • SSDEEP

    6144:2xbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+b:215kv8V5r/hfcexgreI

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      b1fd167838c1b088ce62532d2539e6b933e8b527fcfbcb532957323ec5b03d9bN.exe

    • Size

      408KB

    • MD5

      c01d45e57a91a79911c2573da07d1d06

    • SHA1

      81125de761dc7e768896f4555bd438eca6a2d738

    • SHA256

      7d9ff5fe3c0b45f942daf435a77cc0e87b5b9e1f511beaf30c51ced20a5d3a66

    • SHA512

      35f19e8734c3bd792bca11dce7670743bb45fc05b4a0c072937bc08d6bb4d5e80dfb81de5fd45dc45cb5b71b9b40d110b6bdcb51fef51ee308536b1f014128b2

    • SSDEEP

      6144:2xbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+b:215kv8V5r/hfcexgreI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks