General

  • Target

    c515744424817afdff3c17cbb4eeb2e5e7aa78bfd23be75831b98f58689885fd.exe

  • Size

    297KB

  • Sample

    241119-17ty3ayneq

  • MD5

    d3f4ea964eebabd46d794c6d7fbfb8fd

  • SHA1

    38e420934bd3bd7923f2c48a7eaa7cadf94a54c8

  • SHA256

    c515744424817afdff3c17cbb4eeb2e5e7aa78bfd23be75831b98f58689885fd

  • SHA512

    69439db36d8e028ec523479617c162ee3546999228cbae02b8adeb23b5760d58d985e6b829321ebce155e4dc0d31cae575f552e62cefca5e59855c1c8fd419a0

  • SSDEEP

    6144:tPgvNJua3AuNvayvt4nYxgUGhIW8MaQa3:pgvma3kyvOYxOWW8VQa3

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      c515744424817afdff3c17cbb4eeb2e5e7aa78bfd23be75831b98f58689885fd.exe

    • Size

      297KB

    • MD5

      d3f4ea964eebabd46d794c6d7fbfb8fd

    • SHA1

      38e420934bd3bd7923f2c48a7eaa7cadf94a54c8

    • SHA256

      c515744424817afdff3c17cbb4eeb2e5e7aa78bfd23be75831b98f58689885fd

    • SHA512

      69439db36d8e028ec523479617c162ee3546999228cbae02b8adeb23b5760d58d985e6b829321ebce155e4dc0d31cae575f552e62cefca5e59855c1c8fd419a0

    • SSDEEP

      6144:tPgvNJua3AuNvayvt4nYxgUGhIW8MaQa3:pgvma3kyvOYxOWW8VQa3

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks