General

  • Target

    d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5.exe

  • Size

    296KB

  • Sample

    241116-xw4gkssbqr

  • MD5

    f9607e6621ff1582c96448ff7644afbb

  • SHA1

    2a98e3af24380e1fb81e3b49cb0bd85fd8be666a

  • SHA256

    d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5

  • SHA512

    eb2cb94e5f8db52d6897178d2f60202ef655adba795597d5e795a24f8c996438adc6b2e29e4f6701e6fcf4036b1e42078193cbc2a2967e5752bb3fe352683c66

  • SSDEEP

    6144:HqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O/:Hqa5/ZU9EvlyA2aWvR

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5.exe

    • Size

      296KB

    • MD5

      f9607e6621ff1582c96448ff7644afbb

    • SHA1

      2a98e3af24380e1fb81e3b49cb0bd85fd8be666a

    • SHA256

      d394bcc0f1c002a7c53265df7b655fbf6f64c32ca99c3d3145d4f98e29e8dcc5

    • SHA512

      eb2cb94e5f8db52d6897178d2f60202ef655adba795597d5e795a24f8c996438adc6b2e29e4f6701e6fcf4036b1e42078193cbc2a2967e5752bb3fe352683c66

    • SSDEEP

      6144:HqFYxe8eA24UWODEvlynmM+5dJuseKWI2x8O/:Hqa5/ZU9EvlyA2aWvR

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks