General

  • Target

    b98ac693c348edd3dbecddcb24a45f6605782d9a1e1e0550f02e7a48f155fc6c.exe

  • Size

    284KB

  • Sample

    241112-jpeb8ayblc

  • MD5

    5d15ce8d4ce1c5b99b3ad6646cc83732

  • SHA1

    67e88ef8d3e9cfd49027f6cee574b0888c139dac

  • SHA256

    b98ac693c348edd3dbecddcb24a45f6605782d9a1e1e0550f02e7a48f155fc6c

  • SHA512

    0b704026958ef07b3614a5016e50f15e06c331d4c261069c806d752b4cfc17da2a3a6084e7177f6d42feddb5a7d1abd547ad9df83b5c6f1837baf468711fbd87

  • SSDEEP

    6144:/6H8Rz6dbZC6QOaGqGwVPPfA4zu0b7fPQQ:/6H8FnpMhwVPS0PfN

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      b98ac693c348edd3dbecddcb24a45f6605782d9a1e1e0550f02e7a48f155fc6c.exe

    • Size

      284KB

    • MD5

      5d15ce8d4ce1c5b99b3ad6646cc83732

    • SHA1

      67e88ef8d3e9cfd49027f6cee574b0888c139dac

    • SHA256

      b98ac693c348edd3dbecddcb24a45f6605782d9a1e1e0550f02e7a48f155fc6c

    • SHA512

      0b704026958ef07b3614a5016e50f15e06c331d4c261069c806d752b4cfc17da2a3a6084e7177f6d42feddb5a7d1abd547ad9df83b5c6f1837baf468711fbd87

    • SSDEEP

      6144:/6H8Rz6dbZC6QOaGqGwVPPfA4zu0b7fPQQ:/6H8FnpMhwVPS0PfN

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks