General

  • Target

    f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68

  • Size

    175KB

  • Sample

    241116-k97d6stdne

  • MD5

    e1ea1803729c40ed006ec6a74a276e62

  • SHA1

    46d1405f3b604b09975af5fa72b6de8d47186d67

  • SHA256

    f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68

  • SHA512

    f34cf874e78935006c8313beaa2db6875dad919fd5b94f009468a2e2f8e8a9d7be8d924093987674978829f507da140d25ce11859961fc1ac219de2bc8a1b914

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68

    • Size

      175KB

    • MD5

      e1ea1803729c40ed006ec6a74a276e62

    • SHA1

      46d1405f3b604b09975af5fa72b6de8d47186d67

    • SHA256

      f3028c922e91e17272568e5846ca651e4289651dff75a25c775e6c3371d41e68

    • SHA512

      f34cf874e78935006c8313beaa2db6875dad919fd5b94f009468a2e2f8e8a9d7be8d924093987674978829f507da140d25ce11859961fc1ac219de2bc8a1b914

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks