General

  • Target

    c38835883dbfd3abbab9cb2839b259d4e7f6f7684e94d916708c7a56a3a5b38a

  • Size

    283KB

  • Sample

    241113-cztrbsyjcl

  • MD5

    895f0dd5057bec09cf6b6df5e3b0606c

  • SHA1

    87a2cea3b53f738086762276cca61ff81a091bef

  • SHA256

    c38835883dbfd3abbab9cb2839b259d4e7f6f7684e94d916708c7a56a3a5b38a

  • SHA512

    4b7447c60850e889a80b735e2d0318f87c68e74625ebb1dd4e8af3822198cf09392793832d45ec2d22b9961f5f82baa9deceec9fdd88c30e803458f44f9d027f

  • SSDEEP

    6144:24MXuMjgb9SN4sm8GFbdlQQtecmqZmRvhKJ:24MXSVMgls0W

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      c38835883dbfd3abbab9cb2839b259d4e7f6f7684e94d916708c7a56a3a5b38a

    • Size

      283KB

    • MD5

      895f0dd5057bec09cf6b6df5e3b0606c

    • SHA1

      87a2cea3b53f738086762276cca61ff81a091bef

    • SHA256

      c38835883dbfd3abbab9cb2839b259d4e7f6f7684e94d916708c7a56a3a5b38a

    • SHA512

      4b7447c60850e889a80b735e2d0318f87c68e74625ebb1dd4e8af3822198cf09392793832d45ec2d22b9961f5f82baa9deceec9fdd88c30e803458f44f9d027f

    • SSDEEP

      6144:24MXuMjgb9SN4sm8GFbdlQQtecmqZmRvhKJ:24MXSVMgls0W

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks