General

  • Target

    647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b.exe

  • Size

    408KB

  • Sample

    241115-ry17cawalg

  • MD5

    245e483f4a790aaacce22cf5ccd4f37e

  • SHA1

    51a539c1a5e5cf0d9f101d1b022757eb98805911

  • SHA256

    647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b

  • SHA512

    39ae4632f2b4fd5a6daa2c5a0b7dcc83180d8b24cbd857a60fb86ae2b18e596e848721832f77a3484ccdf2caf8cee2e104c0917423b12c21186039eb5cb15d0e

  • SSDEEP

    6144:5cRLKFOV4Tn9E/be17TPyS74IYiD0+04a/zIS3jJT:56SOmTn9obe17WSUjC0+0DzVV

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b.exe

    • Size

      408KB

    • MD5

      245e483f4a790aaacce22cf5ccd4f37e

    • SHA1

      51a539c1a5e5cf0d9f101d1b022757eb98805911

    • SHA256

      647c849266b7155813e97b0c57ed0e2c3822d31aae534b21a831ef3b102cc54b

    • SHA512

      39ae4632f2b4fd5a6daa2c5a0b7dcc83180d8b24cbd857a60fb86ae2b18e596e848721832f77a3484ccdf2caf8cee2e104c0917423b12c21186039eb5cb15d0e

    • SSDEEP

      6144:5cRLKFOV4Tn9E/be17TPyS74IYiD0+04a/zIS3jJT:56SOmTn9obe17WSUjC0+0DzVV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks