General

  • Target

    6cc3586771a7266a533f139d377d6708d2fca7baa4b0632cfcc1f2ac560f83a1N.exe

  • Size

    284KB

  • Sample

    241123-af2lqasqaz

  • MD5

    864700c5e2d2dfbfbffea17713478700

  • SHA1

    76a35660751c1c0c08081272c3c0ceaa6f886f08

  • SHA256

    6cc3586771a7266a533f139d377d6708d2fca7baa4b0632cfcc1f2ac560f83a1

  • SHA512

    ba048a24817d63d5457ba93fc30fe89963c0e61a4ecf66bc916343148af777f649cd1dabb6eea45d68bd6c32d3b112fead8c45b895e9e38ffbe2d7987bb52fab

  • SSDEEP

    6144:SyXf3looZPsLoYkMfn54n/qMgBJWsxnK:SyXf3KrsYgkB4sx

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      6cc3586771a7266a533f139d377d6708d2fca7baa4b0632cfcc1f2ac560f83a1N.exe

    • Size

      284KB

    • MD5

      864700c5e2d2dfbfbffea17713478700

    • SHA1

      76a35660751c1c0c08081272c3c0ceaa6f886f08

    • SHA256

      6cc3586771a7266a533f139d377d6708d2fca7baa4b0632cfcc1f2ac560f83a1

    • SHA512

      ba048a24817d63d5457ba93fc30fe89963c0e61a4ecf66bc916343148af777f649cd1dabb6eea45d68bd6c32d3b112fead8c45b895e9e38ffbe2d7987bb52fab

    • SSDEEP

      6144:SyXf3looZPsLoYkMfn54n/qMgBJWsxnK:SyXf3KrsYgkB4sx

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks