General

  • Target

    af24f49bf034b193fb610db476735d6bfa19ca38c66167934f21c6f6b182c351.exe

  • Size

    295KB

  • Sample

    241112-gcqtdaweng

  • MD5

    916baef36564f3f9c79f9db7573d668a

  • SHA1

    cf8005513031cf1d9a1bf3f55eb605a89d275f6b

  • SHA256

    af24f49bf034b193fb610db476735d6bfa19ca38c66167934f21c6f6b182c351

  • SHA512

    b4bda956c6a44df5cb9e4e7e6b159e645e0d19307018ab6ae00d0f41db9454610d74d4b990d275fdfb95c67328318e99517ad30c454d596ce93d01869ce1e10b

  • SSDEEP

    6144:+kNNOVkRVBx/10lkVzRrZ08k18+CJ+OSdl/sJ2sZ:VN0VkRbp1K+drVk18+CoFu2sZ

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      af24f49bf034b193fb610db476735d6bfa19ca38c66167934f21c6f6b182c351.exe

    • Size

      295KB

    • MD5

      916baef36564f3f9c79f9db7573d668a

    • SHA1

      cf8005513031cf1d9a1bf3f55eb605a89d275f6b

    • SHA256

      af24f49bf034b193fb610db476735d6bfa19ca38c66167934f21c6f6b182c351

    • SHA512

      b4bda956c6a44df5cb9e4e7e6b159e645e0d19307018ab6ae00d0f41db9454610d74d4b990d275fdfb95c67328318e99517ad30c454d596ce93d01869ce1e10b

    • SSDEEP

      6144:+kNNOVkRVBx/10lkVzRrZ08k18+CJ+OSdl/sJ2sZ:VN0VkRbp1K+drVk18+CoFu2sZ

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks