General

  • Target

    4edd5e8d7d58cdad248088213d1150e2409a9e2b5bd44c8e64b274ef6d1b1463N.exe

  • Size

    175KB

  • Sample

    241119-xzwwxazqdz

  • MD5

    feff5059ef0b7c34fd3d3fea1d3d8fe0

  • SHA1

    22e245c5c24d4a286ee54eb462db8ca54a421716

  • SHA256

    4edd5e8d7d58cdad248088213d1150e2409a9e2b5bd44c8e64b274ef6d1b1463

  • SHA512

    f206574696cd0f5ec895ed42d12183afdd18cafffd7e914f848ae9f3beea2f8a6ef7b543ffb8a8917458b3f1268b75bc51f2d92c422cbe34c9075a1f2cfaf3fa

  • SSDEEP

    3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

Malware Config

Extracted

Family

redline

Botnet

dunkan

C2

193.233.20.24:4123

Attributes
  • auth_value

    505c396c57c6287fc3fdc5f3aeab0819

Targets

    • Target

      4edd5e8d7d58cdad248088213d1150e2409a9e2b5bd44c8e64b274ef6d1b1463N.exe

    • Size

      175KB

    • MD5

      feff5059ef0b7c34fd3d3fea1d3d8fe0

    • SHA1

      22e245c5c24d4a286ee54eb462db8ca54a421716

    • SHA256

      4edd5e8d7d58cdad248088213d1150e2409a9e2b5bd44c8e64b274ef6d1b1463

    • SHA512

      f206574696cd0f5ec895ed42d12183afdd18cafffd7e914f848ae9f3beea2f8a6ef7b543ffb8a8917458b3f1268b75bc51f2d92c422cbe34c9075a1f2cfaf3fa

    • SSDEEP

      3072:6xqZWBJaHEDgXTzzfMK8emA9Xh8fxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOG:oqZVTPfBbXh

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

    • Redline family

MITRE ATT&CK Enterprise v15

Tasks