General

  • Target

    0aec45d756830b329d34e47e28f2c3651919d0e59f7b6760f5dddc902ff2bb6d.exe

  • Size

    295KB

  • Sample

    241117-dry7hszdph

  • MD5

    22079a383a52dc4158263c28f1559613

  • SHA1

    2e1fc31e5a79e508766875867d707d017fb2f0e1

  • SHA256

    0aec45d756830b329d34e47e28f2c3651919d0e59f7b6760f5dddc902ff2bb6d

  • SHA512

    d518bcb535cec7dc498a9dd61e75a6e4aa65bc40da08f03bee7c1b69da30f4e015155998da5f4ae01658a4600bc91a569f214c1f4d14c0ac711a43c8a6f7f0fb

  • SSDEEP

    6144:5kNNOVkRVBx/10lkVzRrZ08k18+CJ+OSdl/sJ2sV:SN0VkRbp1K+drVk18+CoFu2sV

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      0aec45d756830b329d34e47e28f2c3651919d0e59f7b6760f5dddc902ff2bb6d.exe

    • Size

      295KB

    • MD5

      22079a383a52dc4158263c28f1559613

    • SHA1

      2e1fc31e5a79e508766875867d707d017fb2f0e1

    • SHA256

      0aec45d756830b329d34e47e28f2c3651919d0e59f7b6760f5dddc902ff2bb6d

    • SHA512

      d518bcb535cec7dc498a9dd61e75a6e4aa65bc40da08f03bee7c1b69da30f4e015155998da5f4ae01658a4600bc91a569f214c1f4d14c0ac711a43c8a6f7f0fb

    • SSDEEP

      6144:5kNNOVkRVBx/10lkVzRrZ08k18+CJ+OSdl/sJ2sV:SN0VkRbp1K+drVk18+CoFu2sV

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks