General

  • Target

    8b3525e355f69a44eafef0e146b522e26823d8b85acad117a2c82ae1edbfd93eN

  • Size

    399KB

  • Sample

    241112-h6mjgswqdx

  • MD5

    06d24e599dcd0a91f81e02db92034250

  • SHA1

    3f4154b86c2beae24b8e61526d1f489cb163523f

  • SHA256

    8b3525e355f69a44eafef0e146b522e26823d8b85acad117a2c82ae1edbfd93e

  • SHA512

    3ef574b7db5a64b5416b4e7098e3ed922089c41b98d3f936f9f0d9bbf0438944c700f59f04403d800891fd6d8562a130f4dec89b58b91c3d14a44e6898bf2160

  • SSDEEP

    6144:0MayRGL+B61DRI+Dq90J8q+JQ+O7frv/N0fCf:0JyRGCcDRI+Dq90tIQ+G

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      8b3525e355f69a44eafef0e146b522e26823d8b85acad117a2c82ae1edbfd93eN

    • Size

      399KB

    • MD5

      06d24e599dcd0a91f81e02db92034250

    • SHA1

      3f4154b86c2beae24b8e61526d1f489cb163523f

    • SHA256

      8b3525e355f69a44eafef0e146b522e26823d8b85acad117a2c82ae1edbfd93e

    • SHA512

      3ef574b7db5a64b5416b4e7098e3ed922089c41b98d3f936f9f0d9bbf0438944c700f59f04403d800891fd6d8562a130f4dec89b58b91c3d14a44e6898bf2160

    • SSDEEP

      6144:0MayRGL+B61DRI+Dq90J8q+JQ+O7frv/N0fCf:0JyRGCcDRI+Dq90tIQ+G

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks