General

  • Target

    e2d4aa49234e1bb38829d0498931fcb15c5dc4c57d52a47be9cee806d5d10958.exe

  • Size

    176KB

  • Sample

    241111-cjcg4szepj

  • MD5

    8992c3b0bf561e6ae962463c32694287

  • SHA1

    77c3d83b1c7890c9a2b99a6c8fbc95ba92a87bd2

  • SHA256

    e2d4aa49234e1bb38829d0498931fcb15c5dc4c57d52a47be9cee806d5d10958

  • SHA512

    8d461911ec4931a614a2eb37c9af49cb60b093241a2a7da240750e2b2bab5bb02a14fbde917e9087bc300d3fc0ec50fd8000098ee5f296c9811a6a7f64644e10

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jO4:oqZVTPfBbXht

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      e2d4aa49234e1bb38829d0498931fcb15c5dc4c57d52a47be9cee806d5d10958.exe

    • Size

      176KB

    • MD5

      8992c3b0bf561e6ae962463c32694287

    • SHA1

      77c3d83b1c7890c9a2b99a6c8fbc95ba92a87bd2

    • SHA256

      e2d4aa49234e1bb38829d0498931fcb15c5dc4c57d52a47be9cee806d5d10958

    • SHA512

      8d461911ec4931a614a2eb37c9af49cb60b093241a2a7da240750e2b2bab5bb02a14fbde917e9087bc300d3fc0ec50fd8000098ee5f296c9811a6a7f64644e10

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jO4:oqZVTPfBbXht

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks