General

  • Target

    6581181029bf93190cd29ebeec5e6bcd8030719d4ef75590497d43df957e4e1c.exe

  • Size

    399KB

  • Sample

    241206-ybat7stlbt

  • MD5

    847178b8f1af25b2034f2eb5341eb562

  • SHA1

    84f96efb79e22a48f619c7b9892d97de454d3d51

  • SHA256

    6581181029bf93190cd29ebeec5e6bcd8030719d4ef75590497d43df957e4e1c

  • SHA512

    0f19b6e3e7aa82a10cdfc66fe1fb52ce76849734fa982186835b4fe38cdad61681a66b05a8b43316c52b3530444d35cd126eaa18840775fa1aa6c4d3d100d6d7

  • SSDEEP

    6144:vBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9T:v9x133FU0hCcYSdU0weK5T

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Targets

    • Target

      6581181029bf93190cd29ebeec5e6bcd8030719d4ef75590497d43df957e4e1c.exe

    • Size

      399KB

    • MD5

      847178b8f1af25b2034f2eb5341eb562

    • SHA1

      84f96efb79e22a48f619c7b9892d97de454d3d51

    • SHA256

      6581181029bf93190cd29ebeec5e6bcd8030719d4ef75590497d43df957e4e1c

    • SHA512

      0f19b6e3e7aa82a10cdfc66fe1fb52ce76849734fa982186835b4fe38cdad61681a66b05a8b43316c52b3530444d35cd126eaa18840775fa1aa6c4d3d100d6d7

    • SSDEEP

      6144:vBzLt1337JpBZHiinhsLpwlFL2Y6CGSSUPU0jsivKIE9T:v9x133FU0hCcYSdU0weK5T

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks