General

  • Target

    0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0N.exe

  • Size

    175KB

  • Sample

    241115-xkdrsaynft

  • MD5

    d34d2158f6f82531bbc24b3305c230b0

  • SHA1

    a2c0071d0ce9865fa2a0d7ce26d3665ce7b13a99

  • SHA256

    0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0

  • SHA512

    7a5617bf1e7886f961b9e69f8193c2235cb64c6d7541b5803e1555c9c853c833377938d3e6f964d9302d03374a5827910a213308f6897db522dd6c42708ad707

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0N.exe

    • Size

      175KB

    • MD5

      d34d2158f6f82531bbc24b3305c230b0

    • SHA1

      a2c0071d0ce9865fa2a0d7ce26d3665ce7b13a99

    • SHA256

      0ad89b73e8ed5d39a0af03170c4fc240cd1f92ef9038a0770de6fc2f9b5ef5c0

    • SHA512

      7a5617bf1e7886f961b9e69f8193c2235cb64c6d7541b5803e1555c9c853c833377938d3e6f964d9302d03374a5827910a213308f6897db522dd6c42708ad707

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks