General

  • Target

    8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba.exe

  • Size

    176KB

  • Sample

    241111-cfqwbsyre1

  • MD5

    4492c25f21b82d16ad5394c2b596ceb0

  • SHA1

    6094ac1b1f6adbc284c3d6ac271815917fdd802d

  • SHA256

    8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba

  • SHA512

    8710295523505b0a1865a430a4669cfe9e41a1bf7f25e4956f7c6cfcf72dcd1a78f1312fe63df250a3754b712a0b4231da09b03045b92ef59f58a8b657a9b37b

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOB:oqZVTPfBbXhA

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba.exe

    • Size

      176KB

    • MD5

      4492c25f21b82d16ad5394c2b596ceb0

    • SHA1

      6094ac1b1f6adbc284c3d6ac271815917fdd802d

    • SHA256

      8bc13105f106f40def4d4e2b70ff9ea9ae7b866a5daeb216b096b9bea1fa25ba

    • SHA512

      8710295523505b0a1865a430a4669cfe9e41a1bf7f25e4956f7c6cfcf72dcd1a78f1312fe63df250a3754b712a0b4231da09b03045b92ef59f58a8b657a9b37b

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOB:oqZVTPfBbXhA

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks