General

  • Target

    2b9efa197fb1d3b2f5af8eee5f9c2b79b95228867a360c495288bd3de194022d.exe

  • Size

    409KB

  • Sample

    241113-wlb4xawlax

  • MD5

    6195e9405907e94cee293bd5f96679d0

  • SHA1

    90400d9657acf2fbc163fc16c7cd68f9f4ca8dcf

  • SHA256

    2b9efa197fb1d3b2f5af8eee5f9c2b79b95228867a360c495288bd3de194022d

  • SHA512

    73c8ae8ff7186dfcfde220dc6cd78689b673bc373b00adff745166082ed284a79173fd828b7ef7779092706affd7931a3683af677ad579899538d1e281023c1b

  • SSDEEP

    6144:/xKLAQYhhtWD1WCQTEWRanO81sHwhGGF1WTxbcvgm0YEHMDrPnRZ:/sUQccQD7qhGSmxbXXH8rPX

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      2b9efa197fb1d3b2f5af8eee5f9c2b79b95228867a360c495288bd3de194022d.exe

    • Size

      409KB

    • MD5

      6195e9405907e94cee293bd5f96679d0

    • SHA1

      90400d9657acf2fbc163fc16c7cd68f9f4ca8dcf

    • SHA256

      2b9efa197fb1d3b2f5af8eee5f9c2b79b95228867a360c495288bd3de194022d

    • SHA512

      73c8ae8ff7186dfcfde220dc6cd78689b673bc373b00adff745166082ed284a79173fd828b7ef7779092706affd7931a3683af677ad579899538d1e281023c1b

    • SSDEEP

      6144:/xKLAQYhhtWD1WCQTEWRanO81sHwhGGF1WTxbcvgm0YEHMDrPnRZ:/sUQccQD7qhGSmxbXXH8rPX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks