General

  • Target

    f54a60433ad4f7607e07554014f2931eafc6f15641d3defecec1a23ce7c33b07.exe

  • Size

    408KB

  • Sample

    241112-ns13lssanr

  • MD5

    9a2abca786e59dca95d562c0955c7a76

  • SHA1

    54eba6345bf4187cf0a3365cc14840e050e2eccd

  • SHA256

    f54a60433ad4f7607e07554014f2931eafc6f15641d3defecec1a23ce7c33b07

  • SHA512

    951912f17c404ba84ecadda155f0e4cd181484d86f4759969a9e40fc46af9f8e2a40a4444057f360c8b2ab99d53090ac3a6b38548f1bd25520cd820125bb19c7

  • SSDEEP

    6144:2xbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+X:215kv8V5r/hfcexgreE

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      f54a60433ad4f7607e07554014f2931eafc6f15641d3defecec1a23ce7c33b07.exe

    • Size

      408KB

    • MD5

      9a2abca786e59dca95d562c0955c7a76

    • SHA1

      54eba6345bf4187cf0a3365cc14840e050e2eccd

    • SHA256

      f54a60433ad4f7607e07554014f2931eafc6f15641d3defecec1a23ce7c33b07

    • SHA512

      951912f17c404ba84ecadda155f0e4cd181484d86f4759969a9e40fc46af9f8e2a40a4444057f360c8b2ab99d53090ac3a6b38548f1bd25520cd820125bb19c7

    • SSDEEP

      6144:2xbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+X:215kv8V5r/hfcexgreE

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks