General

  • Target

    9bdef0d4c483896d7a6417cf755a967cb78d5efe953cf6d577fd511466ec9dc1N.exe

  • Size

    175KB

  • Sample

    241113-n5zqba1fnb

  • MD5

    9596f197eecd566216956e806c353be0

  • SHA1

    ff23600ac604a67f5097e5acd529e3889cd29d88

  • SHA256

    9bdef0d4c483896d7a6417cf755a967cb78d5efe953cf6d577fd511466ec9dc1

  • SHA512

    e5c9e5a29088057b1a2778444def45f46e46a4f034f658960c3b52f71a2a7a9d7656b549ba4a002d3620b66c16e8b45a81e306bc176b125888d84630357345d0

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      9bdef0d4c483896d7a6417cf755a967cb78d5efe953cf6d577fd511466ec9dc1N.exe

    • Size

      175KB

    • MD5

      9596f197eecd566216956e806c353be0

    • SHA1

      ff23600ac604a67f5097e5acd529e3889cd29d88

    • SHA256

      9bdef0d4c483896d7a6417cf755a967cb78d5efe953cf6d577fd511466ec9dc1

    • SHA512

      e5c9e5a29088057b1a2778444def45f46e46a4f034f658960c3b52f71a2a7a9d7656b549ba4a002d3620b66c16e8b45a81e306bc176b125888d84630357345d0

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks