General

  • Target

    e387df576cb0eb52eca55f85b701fd6318425be76dafaed32de0640f85e7c610N.exe

  • Size

    399KB

  • Sample

    241113-rlspfatdpj

  • MD5

    2af12fc1f877dc09c1bc508ffa440b50

  • SHA1

    0d3e470116212bbcb4c2fbaae2e611eaa5a72ee7

  • SHA256

    e387df576cb0eb52eca55f85b701fd6318425be76dafaed32de0640f85e7c610

  • SHA512

    d31528a3d58f42aa4845bea6ff76b27b31945b93e9b82b8de460989cc1e68ada1807fade04d0744b09ea8a11d67f8e9c174c0d95e958ac9db27e71755185b10f

  • SSDEEP

    6144:vBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9:v9x133FU0hCcYSdU0weK5

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      e387df576cb0eb52eca55f85b701fd6318425be76dafaed32de0640f85e7c610N.exe

    • Size

      399KB

    • MD5

      2af12fc1f877dc09c1bc508ffa440b50

    • SHA1

      0d3e470116212bbcb4c2fbaae2e611eaa5a72ee7

    • SHA256

      e387df576cb0eb52eca55f85b701fd6318425be76dafaed32de0640f85e7c610

    • SHA512

      d31528a3d58f42aa4845bea6ff76b27b31945b93e9b82b8de460989cc1e68ada1807fade04d0744b09ea8a11d67f8e9c174c0d95e958ac9db27e71755185b10f

    • SSDEEP

      6144:vBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9:v9x133FU0hCcYSdU0weK5

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks