General

  • Target

    e653401744c39caeaa9f5f39cf3eb888ab719a4007d197d3a7118ee8d41324d5.exe

  • Size

    446KB

  • Sample

    241113-crf59sxrcn

  • MD5

    862002bb9e4e81fe489f21bd95060ab4

  • SHA1

    bf9f91ab7ab41ae1042c2a61009e99318ad559e6

  • SHA256

    e653401744c39caeaa9f5f39cf3eb888ab719a4007d197d3a7118ee8d41324d5

  • SHA512

    2e24ac2d85a2ba497f1394c847b06afb45b0f9417d05831baebafe93fe42e2a9a6113763846de86cf8bd348a41fcf3fbf24aadaf76f4b2ba3cafc26bcecc14ee

  • SSDEEP

    12288:LpsmWy6TDMK0N4QQdqIXDZHFCc/daX0Il+:Lyzy+Bq4QDatql+

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      e653401744c39caeaa9f5f39cf3eb888ab719a4007d197d3a7118ee8d41324d5.exe

    • Size

      446KB

    • MD5

      862002bb9e4e81fe489f21bd95060ab4

    • SHA1

      bf9f91ab7ab41ae1042c2a61009e99318ad559e6

    • SHA256

      e653401744c39caeaa9f5f39cf3eb888ab719a4007d197d3a7118ee8d41324d5

    • SHA512

      2e24ac2d85a2ba497f1394c847b06afb45b0f9417d05831baebafe93fe42e2a9a6113763846de86cf8bd348a41fcf3fbf24aadaf76f4b2ba3cafc26bcecc14ee

    • SSDEEP

      12288:LpsmWy6TDMK0N4QQdqIXDZHFCc/daX0Il+:Lyzy+Bq4QDatql+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks