General

  • Target

    973da19bed0931d75018f136fb8e8233ec6f84dfacf864fd7bbe052aa95f14a5N.exe

  • Size

    176KB

  • Sample

    241118-sxwe5szana

  • MD5

    5bf8c2867f252f7d6ff41dedf49709f0

  • SHA1

    1fbf2bd5faf897fb3f6bdfc9b4d6b81e67ac3202

  • SHA256

    973da19bed0931d75018f136fb8e8233ec6f84dfacf864fd7bbe052aa95f14a5

  • SHA512

    14f7c1068b542505a414809133a48af2b1b8ed0539a78506cfe636e5266fb9733154f2410be7f9f48c7cb1a06cb79061fad4dd645bac4cb1c928b1474b9d5b68

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      973da19bed0931d75018f136fb8e8233ec6f84dfacf864fd7bbe052aa95f14a5N.exe

    • Size

      176KB

    • MD5

      5bf8c2867f252f7d6ff41dedf49709f0

    • SHA1

      1fbf2bd5faf897fb3f6bdfc9b4d6b81e67ac3202

    • SHA256

      973da19bed0931d75018f136fb8e8233ec6f84dfacf864fd7bbe052aa95f14a5

    • SHA512

      14f7c1068b542505a414809133a48af2b1b8ed0539a78506cfe636e5266fb9733154f2410be7f9f48c7cb1a06cb79061fad4dd645bac4cb1c928b1474b9d5b68

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks