General

  • Target

    69c967606c753af2c722b5c10b8d96d65f6afb97f3e8599a8d7c206e4ea8d7e5N

  • Size

    396KB

  • Sample

    241112-gcw1dsyrcp

  • MD5

    0c4f9805032e21886ab7e0b473422460

  • SHA1

    3e50fb8d70b9de0c78082a834e08b259a8a23d71

  • SHA256

    69c967606c753af2c722b5c10b8d96d65f6afb97f3e8599a8d7c206e4ea8d7e5

  • SHA512

    9cab9cd41f00d45540a2001f16da8111ca4812e3eef444921b7e15f542b25061bdb949708b68b8e01fde26cc0dfe1d89c777f703b505f20f19d38d86ad9d31ce

  • SSDEEP

    6144:K5ALo/V8fOsSH4Pu88U0WZL3jeXrhUFQiMQkhe8UQ:K5Ak/VUSH4Pd8UpL3jSCFdM3h

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      69c967606c753af2c722b5c10b8d96d65f6afb97f3e8599a8d7c206e4ea8d7e5N

    • Size

      396KB

    • MD5

      0c4f9805032e21886ab7e0b473422460

    • SHA1

      3e50fb8d70b9de0c78082a834e08b259a8a23d71

    • SHA256

      69c967606c753af2c722b5c10b8d96d65f6afb97f3e8599a8d7c206e4ea8d7e5

    • SHA512

      9cab9cd41f00d45540a2001f16da8111ca4812e3eef444921b7e15f542b25061bdb949708b68b8e01fde26cc0dfe1d89c777f703b505f20f19d38d86ad9d31ce

    • SSDEEP

      6144:K5ALo/V8fOsSH4Pu88U0WZL3jeXrhUFQiMQkhe8UQ:K5Ak/VUSH4Pd8UpL3jSCFdM3h

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks