General

  • Target

    cc26ff70ba329de6cd800b4ee95cde8593156c3ee1eed3d512afb73cbe7cdb5e

  • Size

    408KB

  • Sample

    241115-t8lkraxfpa

  • MD5

    537c59b3149ebf42fd980f092e3f03f0

  • SHA1

    858d2e16c5f1ceea03a48beb7bcac2c1fd7041fc

  • SHA256

    cc26ff70ba329de6cd800b4ee95cde8593156c3ee1eed3d512afb73cbe7cdb5e

  • SHA512

    d0b7fe721788a35b19639518c2c29337681ca64a9150499819be0ad9f1154a094ff3ba618c1b1214ffa022136d358c38a30af875151ec03154cbcf437b76f5ca

  • SSDEEP

    6144:DcRLKFOV4Tn9E/be17TPyS74IYiD0+04a/zIS3jJ:D6SOmTn9obe17WSUjC0+0DzV

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      cc26ff70ba329de6cd800b4ee95cde8593156c3ee1eed3d512afb73cbe7cdb5e

    • Size

      408KB

    • MD5

      537c59b3149ebf42fd980f092e3f03f0

    • SHA1

      858d2e16c5f1ceea03a48beb7bcac2c1fd7041fc

    • SHA256

      cc26ff70ba329de6cd800b4ee95cde8593156c3ee1eed3d512afb73cbe7cdb5e

    • SHA512

      d0b7fe721788a35b19639518c2c29337681ca64a9150499819be0ad9f1154a094ff3ba618c1b1214ffa022136d358c38a30af875151ec03154cbcf437b76f5ca

    • SSDEEP

      6144:DcRLKFOV4Tn9E/be17TPyS74IYiD0+04a/zIS3jJ:D6SOmTn9obe17WSUjC0+0DzV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks