General

  • Target

    c5b0ff34c105a994a46baf049667e9125c989ef1b5bef891d6719c69cb71afb7N.exe

  • Size

    176KB

  • Sample

    241114-axnq7avqdl

  • MD5

    9ce9446735184b16b123ae1157ca0990

  • SHA1

    28082e5d35579b886f5a6513e6974e732065a269

  • SHA256

    c5b0ff34c105a994a46baf049667e9125c989ef1b5bef891d6719c69cb71afb7

  • SHA512

    cc4c8cb2b509acf7105ef6ff6bf9367f44d7986d433cf46ee4c54c4ec8a8c11ae2e89ddf42d8c846c041326d9d1a5df24b02ec380450e6b3199df8294e2361d6

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      c5b0ff34c105a994a46baf049667e9125c989ef1b5bef891d6719c69cb71afb7N.exe

    • Size

      176KB

    • MD5

      9ce9446735184b16b123ae1157ca0990

    • SHA1

      28082e5d35579b886f5a6513e6974e732065a269

    • SHA256

      c5b0ff34c105a994a46baf049667e9125c989ef1b5bef891d6719c69cb71afb7

    • SHA512

      cc4c8cb2b509acf7105ef6ff6bf9367f44d7986d433cf46ee4c54c4ec8a8c11ae2e89ddf42d8c846c041326d9d1a5df24b02ec380450e6b3199df8294e2361d6

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks