General

  • Target

    9a3ab38c2e629dfc3d3dcd9c928c4be9ecb5386c70e3e8029832c572c3e6128c.exe

  • Size

    283KB

  • Sample

    241112-gfbhvsvpev

  • MD5

    70999cca7380d169df1befd077803675

  • SHA1

    cb9b2416bc2e065b532a7916a5296b601d72c9c8

  • SHA256

    9a3ab38c2e629dfc3d3dcd9c928c4be9ecb5386c70e3e8029832c572c3e6128c

  • SHA512

    0e642ae10d3423e3c6fff0166275227f5101bdbe660855132eab46f0cd5e018f0e269aeead40b082bbebc27cb05c2579ffbf506f81c3ee5ca52ae5c47deef775

  • SSDEEP

    6144:pAqeSy/2ab7xogtr1wYk4+zccfoNMZcuVHNmapbhXJ8:pAqeSD8ftRhkHIJyjRw

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      9a3ab38c2e629dfc3d3dcd9c928c4be9ecb5386c70e3e8029832c572c3e6128c.exe

    • Size

      283KB

    • MD5

      70999cca7380d169df1befd077803675

    • SHA1

      cb9b2416bc2e065b532a7916a5296b601d72c9c8

    • SHA256

      9a3ab38c2e629dfc3d3dcd9c928c4be9ecb5386c70e3e8029832c572c3e6128c

    • SHA512

      0e642ae10d3423e3c6fff0166275227f5101bdbe660855132eab46f0cd5e018f0e269aeead40b082bbebc27cb05c2579ffbf506f81c3ee5ca52ae5c47deef775

    • SSDEEP

      6144:pAqeSy/2ab7xogtr1wYk4+zccfoNMZcuVHNmapbhXJ8:pAqeSD8ftRhkHIJyjRw

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks