General

  • Target

    a35f22699e376d659e3f24e016fcb6ba2d7765770e8ef54288ac5995e2627342

  • Size

    175KB

  • Sample

    241116-bjwejswgqc

  • MD5

    21bd043c6eecba768984cb197b5f1ca9

  • SHA1

    5696184e5b658d0cf9944345dcd8a6182c4e2ebf

  • SHA256

    a35f22699e376d659e3f24e016fcb6ba2d7765770e8ef54288ac5995e2627342

  • SHA512

    20e9e9638817310595eca255a30b3db152d626237598bf392f24ab312663a909d35dd84672191a00cea296950900b76080b9b206d2fc47536fbec9d417c89437

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      a35f22699e376d659e3f24e016fcb6ba2d7765770e8ef54288ac5995e2627342

    • Size

      175KB

    • MD5

      21bd043c6eecba768984cb197b5f1ca9

    • SHA1

      5696184e5b658d0cf9944345dcd8a6182c4e2ebf

    • SHA256

      a35f22699e376d659e3f24e016fcb6ba2d7765770e8ef54288ac5995e2627342

    • SHA512

      20e9e9638817310595eca255a30b3db152d626237598bf392f24ab312663a909d35dd84672191a00cea296950900b76080b9b206d2fc47536fbec9d417c89437

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks