General

  • Target

    5f8c395924c5a16c0fcc1f80b26a8c3c00761ed0b25c8513b38279da1309a97e.exe

  • Size

    446KB

  • Sample

    241113-wfcs9awfrf

  • MD5

    73e400da1ab07e2cb94916b6ec70d4ca

  • SHA1

    2668053a48dc9907734e421af81ad8d64920dd82

  • SHA256

    5f8c395924c5a16c0fcc1f80b26a8c3c00761ed0b25c8513b38279da1309a97e

  • SHA512

    d7cd8548d578d8187a202c4c237ba7e4e6ef5061b3e9340b410b0aec726a618595458d5deb089d4aae312a91337d88c7e808c6af63b0c8e98744ab1abaf37b01

  • SSDEEP

    12288:LpsmWy6TDMK0N4QQdqIXDZHFCc/daX0Ila:Lyzy+Bq4QDatqla

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      5f8c395924c5a16c0fcc1f80b26a8c3c00761ed0b25c8513b38279da1309a97e.exe

    • Size

      446KB

    • MD5

      73e400da1ab07e2cb94916b6ec70d4ca

    • SHA1

      2668053a48dc9907734e421af81ad8d64920dd82

    • SHA256

      5f8c395924c5a16c0fcc1f80b26a8c3c00761ed0b25c8513b38279da1309a97e

    • SHA512

      d7cd8548d578d8187a202c4c237ba7e4e6ef5061b3e9340b410b0aec726a618595458d5deb089d4aae312a91337d88c7e808c6af63b0c8e98744ab1abaf37b01

    • SSDEEP

      12288:LpsmWy6TDMK0N4QQdqIXDZHFCc/daX0Ila:Lyzy+Bq4QDatqla

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks