General

  • Target

    6cb7b9c99ab6d2f70166d80d745bb695c116aca640a4094425ab5231ae60cf3cN.exe

  • Size

    399KB

  • Sample

    241206-pq159sxmgy

  • MD5

    85256862317c7e3ff797eb39f0f72230

  • SHA1

    a4d6cecce3efa5176b9f31f1a49d6181d97ac834

  • SHA256

    6cb7b9c99ab6d2f70166d80d745bb695c116aca640a4094425ab5231ae60cf3c

  • SHA512

    f6d7500cb8e87027c073609ac2434f0de65c9bda12adca152a27e3ff9cd189720d7ed762d1d33f92f20537084fe1acf24adb51abcedf9ac2ceac83268a59b303

  • SSDEEP

    6144:vBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9b:v9x133FU0hCcYSdU0weK5b

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      6cb7b9c99ab6d2f70166d80d745bb695c116aca640a4094425ab5231ae60cf3cN.exe

    • Size

      399KB

    • MD5

      85256862317c7e3ff797eb39f0f72230

    • SHA1

      a4d6cecce3efa5176b9f31f1a49d6181d97ac834

    • SHA256

      6cb7b9c99ab6d2f70166d80d745bb695c116aca640a4094425ab5231ae60cf3c

    • SHA512

      f6d7500cb8e87027c073609ac2434f0de65c9bda12adca152a27e3ff9cd189720d7ed762d1d33f92f20537084fe1acf24adb51abcedf9ac2ceac83268a59b303

    • SSDEEP

      6144:vBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9b:v9x133FU0hCcYSdU0weK5b

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks