General

  • Target

    59ec7f99e237070a4fb00997622523246284ae96b4bc94ee89207caa29ec7752N.exe

  • Size

    175KB

  • Sample

    241118-l48wgstpdz

  • MD5

    ac2777c84a4aa042f35eaefaf931e270

  • SHA1

    459d560ea048cb9288dbd121ddd116f9e21e8803

  • SHA256

    59ec7f99e237070a4fb00997622523246284ae96b4bc94ee89207caa29ec7752

  • SHA512

    d66041a58a5c4dc7323f8c1282f16a5a76e62a2a6df6702c22c2013a04c269fa5e7d70b00fd9dcf37ea4b5602693c45fe65088291533a2f6f8d6cce585d054eb

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      59ec7f99e237070a4fb00997622523246284ae96b4bc94ee89207caa29ec7752N.exe

    • Size

      175KB

    • MD5

      ac2777c84a4aa042f35eaefaf931e270

    • SHA1

      459d560ea048cb9288dbd121ddd116f9e21e8803

    • SHA256

      59ec7f99e237070a4fb00997622523246284ae96b4bc94ee89207caa29ec7752

    • SHA512

      d66041a58a5c4dc7323f8c1282f16a5a76e62a2a6df6702c22c2013a04c269fa5e7d70b00fd9dcf37ea4b5602693c45fe65088291533a2f6f8d6cce585d054eb

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks