General

  • Target

    e15acba75769d4304c4430492aee7b32bbd8cf2b910331a23f90f28774febd44N.exe

  • Size

    284KB

  • Sample

    241119-tlcz4ayeqq

  • MD5

    fc7011a5562816cd1b33f1bd8c8c6900

  • SHA1

    1e8b829324f9d3eead066a2aec98679f3b3f92ce

  • SHA256

    e15acba75769d4304c4430492aee7b32bbd8cf2b910331a23f90f28774febd44

  • SHA512

    b98a6df2799d79434786b577c00d33509b43f72b0deb3cae6c9d375ebdbee4ee60dd40816060a1dbcedbbbd26af4b606641b1b63ae1b181de2fe5cccac32d360

  • SSDEEP

    6144:z6H8Rz6dbZC6QOaGqGwVPPfA4zu0b7fPQ:z6H8FnpMhwVPS0Pf

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      e15acba75769d4304c4430492aee7b32bbd8cf2b910331a23f90f28774febd44N.exe

    • Size

      284KB

    • MD5

      fc7011a5562816cd1b33f1bd8c8c6900

    • SHA1

      1e8b829324f9d3eead066a2aec98679f3b3f92ce

    • SHA256

      e15acba75769d4304c4430492aee7b32bbd8cf2b910331a23f90f28774febd44

    • SHA512

      b98a6df2799d79434786b577c00d33509b43f72b0deb3cae6c9d375ebdbee4ee60dd40816060a1dbcedbbbd26af4b606641b1b63ae1b181de2fe5cccac32d360

    • SSDEEP

      6144:z6H8Rz6dbZC6QOaGqGwVPPfA4zu0b7fPQ:z6H8FnpMhwVPS0Pf

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks