General

  • Target

    bf25815c0491ece72b065a8bd88953cfadfe5a967c06d462965fc0f8d2418c88

  • Size

    295KB

  • Sample

    241113-crx4satpc1

  • MD5

    76e73730eff5ed55a26f8fad9b61a739

  • SHA1

    d27a5f65e5aa57ce07c141b98a4f96d88c58e7ad

  • SHA256

    bf25815c0491ece72b065a8bd88953cfadfe5a967c06d462965fc0f8d2418c88

  • SHA512

    3637f2e6c8641b89444a9dae4f990f6e65210dfa9a5d0680b31155b507b601408ee51bfa5e47322f8439bd9e307378b5e347e5fd5732bd277283f014806e0627

  • SSDEEP

    6144:WnRzTgJjqjpZnUYmJGX9yqheRnrEXB/05:2RzMOlZnUV4X9yaeRrEXm

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      bf25815c0491ece72b065a8bd88953cfadfe5a967c06d462965fc0f8d2418c88

    • Size

      295KB

    • MD5

      76e73730eff5ed55a26f8fad9b61a739

    • SHA1

      d27a5f65e5aa57ce07c141b98a4f96d88c58e7ad

    • SHA256

      bf25815c0491ece72b065a8bd88953cfadfe5a967c06d462965fc0f8d2418c88

    • SHA512

      3637f2e6c8641b89444a9dae4f990f6e65210dfa9a5d0680b31155b507b601408ee51bfa5e47322f8439bd9e307378b5e347e5fd5732bd277283f014806e0627

    • SSDEEP

      6144:WnRzTgJjqjpZnUYmJGX9yqheRnrEXB/05:2RzMOlZnUV4X9yaeRrEXm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks