General

  • Target

    d225d130f44847d6ba6a1ced57d56deba870a54843745ac209d9d42cfeb9d2ce.exe

  • Size

    296KB

  • Sample

    241113-nz289a1grj

  • MD5

    9b4d6e1ac7739c7d36df6520e3b9dd1e

  • SHA1

    41e271588c0cf592426b8770fdc979ccf4c0f7e5

  • SHA256

    d225d130f44847d6ba6a1ced57d56deba870a54843745ac209d9d42cfeb9d2ce

  • SHA512

    dd29a8a95a677042e5e3440a782c312173bad68a80d82e1f98bfe2b17773eb38ff3a24412dd6621c0881ea21379828bb4f0ef3bcce8263573bf57ae5c39a63ce

  • SSDEEP

    6144:cqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8OV:cqa5/ZU9EvlyA2aWv7

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      d225d130f44847d6ba6a1ced57d56deba870a54843745ac209d9d42cfeb9d2ce.exe

    • Size

      296KB

    • MD5

      9b4d6e1ac7739c7d36df6520e3b9dd1e

    • SHA1

      41e271588c0cf592426b8770fdc979ccf4c0f7e5

    • SHA256

      d225d130f44847d6ba6a1ced57d56deba870a54843745ac209d9d42cfeb9d2ce

    • SHA512

      dd29a8a95a677042e5e3440a782c312173bad68a80d82e1f98bfe2b17773eb38ff3a24412dd6621c0881ea21379828bb4f0ef3bcce8263573bf57ae5c39a63ce

    • SSDEEP

      6144:cqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8OV:cqa5/ZU9EvlyA2aWv7

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks