General

  • Target

    3c6902501ba681985c9d5ddbb044c047deb3a32e89d9d145ce0b9ceb393a14d6.exe

  • Size

    295KB

  • Sample

    241113-vd96aswcnk

  • MD5

    b9c39ff7d90707ae7e975d2b5960499f

  • SHA1

    4ccf3e054f15c7ffa3779dfd8bb937316841f02d

  • SHA256

    3c6902501ba681985c9d5ddbb044c047deb3a32e89d9d145ce0b9ceb393a14d6

  • SHA512

    d86a55fbb7d2aab0bf84c5145a9afb6ec82ded62ef761869c542800aec0f94946c478298a7138f296130cd6f4410340e06a13bb2816d6199bbc4e38d67a6b4a4

  • SSDEEP

    6144:1kNNOVkRVBx/10lkVzRrZ08k18+CJ+OSdl/sJ2sd:mN0VkRbp1K+drVk18+CoFu2sd

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      3c6902501ba681985c9d5ddbb044c047deb3a32e89d9d145ce0b9ceb393a14d6.exe

    • Size

      295KB

    • MD5

      b9c39ff7d90707ae7e975d2b5960499f

    • SHA1

      4ccf3e054f15c7ffa3779dfd8bb937316841f02d

    • SHA256

      3c6902501ba681985c9d5ddbb044c047deb3a32e89d9d145ce0b9ceb393a14d6

    • SHA512

      d86a55fbb7d2aab0bf84c5145a9afb6ec82ded62ef761869c542800aec0f94946c478298a7138f296130cd6f4410340e06a13bb2816d6199bbc4e38d67a6b4a4

    • SSDEEP

      6144:1kNNOVkRVBx/10lkVzRrZ08k18+CJ+OSdl/sJ2sd:mN0VkRbp1K+drVk18+CoFu2sd

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks