General

  • Target

    c4d558f0c35836f09ddf522ce0e7d435d1ab0695cfe779fbc2157e2353c63d4c

  • Size

    296KB

  • Sample

    241113-c2xwrsvgmq

  • MD5

    5d0933bbed890a1fdf4d8a88b5b893a4

  • SHA1

    4a356bbb2e79443a166dcb32487de0b5dc4bdf16

  • SHA256

    c4d558f0c35836f09ddf522ce0e7d435d1ab0695cfe779fbc2157e2353c63d4c

  • SHA512

    7da5d6d7af47765e88a9b6572573ae992772943e988f7d22ef77705b19384b96d76e56cb0a90c7fc45395958955c83c7a2fc786fb76bab3b0d69501b904177c5

  • SSDEEP

    6144:gqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O:gqa5/ZU9EvlyA2aWv

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      c4d558f0c35836f09ddf522ce0e7d435d1ab0695cfe779fbc2157e2353c63d4c

    • Size

      296KB

    • MD5

      5d0933bbed890a1fdf4d8a88b5b893a4

    • SHA1

      4a356bbb2e79443a166dcb32487de0b5dc4bdf16

    • SHA256

      c4d558f0c35836f09ddf522ce0e7d435d1ab0695cfe779fbc2157e2353c63d4c

    • SHA512

      7da5d6d7af47765e88a9b6572573ae992772943e988f7d22ef77705b19384b96d76e56cb0a90c7fc45395958955c83c7a2fc786fb76bab3b0d69501b904177c5

    • SSDEEP

      6144:gqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O:gqa5/ZU9EvlyA2aWv

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks