General

  • Target

    84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5.exe

  • Size

    408KB

  • Sample

    241116-ldws8sspgw

  • MD5

    2ab35d804cd275e7091d1b3da8822cc8

  • SHA1

    819e93d7a4f73e7ed34e9e2e3edb906620c82200

  • SHA256

    84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5

  • SHA512

    3a13d10d93be06d0ad0be1606c1c6de2956e8526eeccdb87ffd09b615c13664a6a4080b85c776d5dcf0c4ce0a855d4825b0170e642b5e095e416a1ccced5c57c

  • SSDEEP

    6144:WxbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+b:W15kv8V5r/hfcexgreY

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5.exe

    • Size

      408KB

    • MD5

      2ab35d804cd275e7091d1b3da8822cc8

    • SHA1

      819e93d7a4f73e7ed34e9e2e3edb906620c82200

    • SHA256

      84cc45a95c9a42d16e1e76c224722770678de3db59f24d8a6aeccc1fb3fe09d5

    • SHA512

      3a13d10d93be06d0ad0be1606c1c6de2956e8526eeccdb87ffd09b615c13664a6a4080b85c776d5dcf0c4ce0a855d4825b0170e642b5e095e416a1ccced5c57c

    • SSDEEP

      6144:WxbLVkYy2Q8V5gOb9R/hfAZGgVi9PaYc1eSneVww+b:W15kv8V5r/hfcexgreY

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks