General

  • Target

    bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9caN.exe

  • Size

    297KB

  • Sample

    241119-ghd2rs1bmc

  • MD5

    3a98007a4177c9c4be57fd1962329920

  • SHA1

    fd2a9088d82d78034c9dece57a440fdbcb71182a

  • SHA256

    bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9ca

  • SHA512

    f0db80d6f89f8fe078c4af5f64af18a760329909483c085a92e65c17b94500a687728e8a5ebc7a92b3b376e5b62da6a2262301c3180e1d92b7269df51aba4ec2

  • SSDEEP

    3072:cuo7MNgXUC+G0a4MK93QjaB03cEO9qaPZ6+8J8lkmlBn+E7S6qukXc3Sr:w7MAv+G0abK1B19nwklBn+EWHn

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9caN.exe

    • Size

      297KB

    • MD5

      3a98007a4177c9c4be57fd1962329920

    • SHA1

      fd2a9088d82d78034c9dece57a440fdbcb71182a

    • SHA256

      bb66ca55234bd5a4b7882d25b79b342c1999051842eb8242e581b349f55bb9ca

    • SHA512

      f0db80d6f89f8fe078c4af5f64af18a760329909483c085a92e65c17b94500a687728e8a5ebc7a92b3b376e5b62da6a2262301c3180e1d92b7269df51aba4ec2

    • SSDEEP

      3072:cuo7MNgXUC+G0a4MK93QjaB03cEO9qaPZ6+8J8lkmlBn+E7S6qukXc3Sr:w7MAv+G0abK1B19nwklBn+EWHn

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks