General

  • Target

    716df26d191fc0b7ffa07ec72bf2f4ee289a5d26a55e01163ff53d29485874fd.exe

  • Size

    297KB

  • Sample

    241119-jw7mcashkm

  • MD5

    4392b09beeda2d479bebecff39c4ec80

  • SHA1

    54ff51cef2a53470aeaf7f4715ff7705e8beba10

  • SHA256

    716df26d191fc0b7ffa07ec72bf2f4ee289a5d26a55e01163ff53d29485874fd

  • SHA512

    568a8bc8bc9cad393b6a08562b967a4035522a0b9c7ab41a07881c8744509ffc842f93af4df7dabcddf3f45eb158f84f1345b2da9ef6934fd9466966ea6dd38a

  • SSDEEP

    3072:cuo7MNgXUC+G0a4MK93QjaB03cEO9qaPZ6+8J8lkmlBn+E7S6qukXc3SrY:w7MAv+G0abK1B19nwklBn+EWHnI

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      716df26d191fc0b7ffa07ec72bf2f4ee289a5d26a55e01163ff53d29485874fd.exe

    • Size

      297KB

    • MD5

      4392b09beeda2d479bebecff39c4ec80

    • SHA1

      54ff51cef2a53470aeaf7f4715ff7705e8beba10

    • SHA256

      716df26d191fc0b7ffa07ec72bf2f4ee289a5d26a55e01163ff53d29485874fd

    • SHA512

      568a8bc8bc9cad393b6a08562b967a4035522a0b9c7ab41a07881c8744509ffc842f93af4df7dabcddf3f45eb158f84f1345b2da9ef6934fd9466966ea6dd38a

    • SSDEEP

      3072:cuo7MNgXUC+G0a4MK93QjaB03cEO9qaPZ6+8J8lkmlBn+E7S6qukXc3SrY:w7MAv+G0abK1B19nwklBn+EWHnI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks