General

  • Target

    c8caf700e150e6940d1d4eb99c60f4be551fbda5f96f94c82ade9fa58a73c409N.exe

  • Size

    283KB

  • Sample

    241112-jwxr5sycmd

  • MD5

    7d63c8f6afb817024c6b979dcd1c71eb

  • SHA1

    d0eb4f8b625dca30049cfd38455181fc91e0471a

  • SHA256

    a2932373b4900d948624e3f4d17e18040cb023d358e130e98ebe3bc92ba1be07

  • SHA512

    b7776f149c01c9a73588a9751d50ac8cd4e9b465d5aa2096f53bc1cff48ee65616a622cb80d1cc5a607220058941321ad047018aeb39f2382a751d5580f5a0fe

  • SSDEEP

    6144:pAqeSy/2ab7xogtr1wYk4+zccfoNMZcuVHNmapbhXJy:pAqeSD8ftRhkHIJyjRm

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      c8caf700e150e6940d1d4eb99c60f4be551fbda5f96f94c82ade9fa58a73c409N.exe

    • Size

      283KB

    • MD5

      7d63c8f6afb817024c6b979dcd1c71eb

    • SHA1

      d0eb4f8b625dca30049cfd38455181fc91e0471a

    • SHA256

      a2932373b4900d948624e3f4d17e18040cb023d358e130e98ebe3bc92ba1be07

    • SHA512

      b7776f149c01c9a73588a9751d50ac8cd4e9b465d5aa2096f53bc1cff48ee65616a622cb80d1cc5a607220058941321ad047018aeb39f2382a751d5580f5a0fe

    • SSDEEP

      6144:pAqeSy/2ab7xogtr1wYk4+zccfoNMZcuVHNmapbhXJy:pAqeSD8ftRhkHIJyjRm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks