General

  • Target

    2f018e66e3da5c600ba7a2f58afa7eedd59c5b7a266768aabe3d60a945e083efN.exe

  • Size

    305KB

  • Sample

    241113-r5legatgnn

  • MD5

    9e3e05a4d554714f981c14f0438d2d80

  • SHA1

    cc12b852f155ce90f85f4b49cfd6e765f90fbbe6

  • SHA256

    2f018e66e3da5c600ba7a2f58afa7eedd59c5b7a266768aabe3d60a945e083ef

  • SHA512

    de620f28b35573e5da67871241195a613e8cddba1cbc2491dea5e0016f7017bd92c859aff53f08268c307a60354672ee689b25f443abf285bdc3fcb69b997226

  • SSDEEP

    3072:syBOxIW4HuW/dZHGmVGFjvqjNKWfRzZgv+IEEG67Ap9Pr6OGNzeb23pldqOPZEW6:zOCW4vdthV8vqkWJzYWWXqWLH5Bm

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      2f018e66e3da5c600ba7a2f58afa7eedd59c5b7a266768aabe3d60a945e083efN.exe

    • Size

      305KB

    • MD5

      9e3e05a4d554714f981c14f0438d2d80

    • SHA1

      cc12b852f155ce90f85f4b49cfd6e765f90fbbe6

    • SHA256

      2f018e66e3da5c600ba7a2f58afa7eedd59c5b7a266768aabe3d60a945e083ef

    • SHA512

      de620f28b35573e5da67871241195a613e8cddba1cbc2491dea5e0016f7017bd92c859aff53f08268c307a60354672ee689b25f443abf285bdc3fcb69b997226

    • SSDEEP

      3072:syBOxIW4HuW/dZHGmVGFjvqjNKWfRzZgv+IEEG67Ap9Pr6OGNzeb23pldqOPZEW6:zOCW4vdthV8vqkWJzYWWXqWLH5Bm

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks