General

  • Target

    eab56a133aca8f84d6e5ec128b81617c54da41e5758fbd4d7a74f582860393d1N.exe

  • Size

    297KB

  • Sample

    241117-dr2mmszflm

  • MD5

    2c8106120ec7728e316ade5d77f0acb0

  • SHA1

    7079bb542e505ff73948847505931ff5d122abf8

  • SHA256

    eab56a133aca8f84d6e5ec128b81617c54da41e5758fbd4d7a74f582860393d1

  • SHA512

    4e96e749b2c7992a9120844345304ab9e58033dab4b324a347463291c0d505bc52d4fbf221a110c42583163967e7e48ea828757ea00738085fd12c36b3d8348a

  • SSDEEP

    6144:tPgvNJua3AuNvayvt4nYxgUGhIW8MaQa:pgvma3kyvOYxOWW8VQa

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      eab56a133aca8f84d6e5ec128b81617c54da41e5758fbd4d7a74f582860393d1N.exe

    • Size

      297KB

    • MD5

      2c8106120ec7728e316ade5d77f0acb0

    • SHA1

      7079bb542e505ff73948847505931ff5d122abf8

    • SHA256

      eab56a133aca8f84d6e5ec128b81617c54da41e5758fbd4d7a74f582860393d1

    • SHA512

      4e96e749b2c7992a9120844345304ab9e58033dab4b324a347463291c0d505bc52d4fbf221a110c42583163967e7e48ea828757ea00738085fd12c36b3d8348a

    • SSDEEP

      6144:tPgvNJua3AuNvayvt4nYxgUGhIW8MaQa:pgvma3kyvOYxOWW8VQa

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks