General

  • Target

    46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648N.exe

  • Size

    396KB

  • Sample

    241114-d8y8vaxpdm

  • MD5

    7b53ff7f53dcb48ccdf06ae4d22376c0

  • SHA1

    3fc0ce1f06e64272f633643eef9962f08a70f15b

  • SHA256

    46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648

  • SHA512

    6052734674103fb6029c3b53d42997b8979e142c80f30e4054f07c6930f6c166afcc18d3dbbcbd186e1242ef295b121131fb8f45ff3aab47addc2c44f21d73f1

  • SSDEEP

    6144:25ALo/V8fOsSH4Pu88U0WZL3jeXrhUFQiMQkhe8UQ:25Ak/VUSH4Pd8UpL3jSCFdM3h

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648N.exe

    • Size

      396KB

    • MD5

      7b53ff7f53dcb48ccdf06ae4d22376c0

    • SHA1

      3fc0ce1f06e64272f633643eef9962f08a70f15b

    • SHA256

      46ec43b7e2320fcd2328f1035f0cde86a7c9b6113fa06270e0e8a97232cb6648

    • SHA512

      6052734674103fb6029c3b53d42997b8979e142c80f30e4054f07c6930f6c166afcc18d3dbbcbd186e1242ef295b121131fb8f45ff3aab47addc2c44f21d73f1

    • SSDEEP

      6144:25ALo/V8fOsSH4Pu88U0WZL3jeXrhUFQiMQkhe8UQ:25Ak/VUSH4Pd8UpL3jSCFdM3h

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks