General

  • Target

    djjiM70.exe

  • Size

    283KB

  • Sample

    241202-q7d8hasjcp

  • MD5

    32096bee539135fc0e1944fb5a727e24

  • SHA1

    04cd9c4d782bcddc016c3bce68495ddc01137a1a

  • SHA256

    f7eca238f01c5423271f963ed83ec2f6f11e9a77616b75641c36cbc7d619e679

  • SHA512

    8291bc6bca985a0d593113e15049413fd78421c4db2bd8f4b235e0bba739c0064dfdd9f79c8f5f5709610360e55095d5a585cc94f8ace3b1c7c0ce0ed6bd850e

  • SSDEEP

    6144:3ywfJlo7uQSAQsRgEpv9EBvlCH5DEWG2ycfm:3ywfJK7uQLQ2fpvyBvlCH5Dl+

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      djjiM70.exe

    • Size

      283KB

    • MD5

      32096bee539135fc0e1944fb5a727e24

    • SHA1

      04cd9c4d782bcddc016c3bce68495ddc01137a1a

    • SHA256

      f7eca238f01c5423271f963ed83ec2f6f11e9a77616b75641c36cbc7d619e679

    • SHA512

      8291bc6bca985a0d593113e15049413fd78421c4db2bd8f4b235e0bba739c0064dfdd9f79c8f5f5709610360e55095d5a585cc94f8ace3b1c7c0ce0ed6bd850e

    • SSDEEP

      6144:3ywfJlo7uQSAQsRgEpv9EBvlCH5DEWG2ycfm:3ywfJK7uQLQ2fpvyBvlCH5Dl+

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks