General

  • Target

    1032-55-0x0000000002030000-0x000000000205E000-memory.dmp

  • Size

    184KB

  • Sample

    220513-be4kcsechm

  • MD5

    f0dc982d7ae9c1dbf203ea4271561191

  • SHA1

    3d6d5414b3413fcfd1587d5f0a6dc96e9a6d53d9

  • SHA256

    1b0c7854f38da7c04821ddf0521c4aa716f4abd7b7b7cd12fdfcd0c9134d09dd

  • SHA512

    ee89460d076acfc7c08f526ee5b54eac0d0513230f23220d1ebc6e1ea0289dbffdc07a89b3a56df756883decd24a534e59cdbe818ad532c82c17ce01f402dfa0

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

777

C2

190.2.145.71:26414

Attributes
  • auth_value

    95fc36a53c042abc459d9368e4f933a4

Targets

    • Target

      1032-55-0x0000000002030000-0x000000000205E000-memory.dmp

    • Size

      184KB

    • MD5

      f0dc982d7ae9c1dbf203ea4271561191

    • SHA1

      3d6d5414b3413fcfd1587d5f0a6dc96e9a6d53d9

    • SHA256

      1b0c7854f38da7c04821ddf0521c4aa716f4abd7b7b7cd12fdfcd0c9134d09dd

    • SHA512

      ee89460d076acfc7c08f526ee5b54eac0d0513230f23220d1ebc6e1ea0289dbffdc07a89b3a56df756883decd24a534e59cdbe818ad532c82c17ce01f402dfa0

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

MITRE ATT&CK Matrix

Tasks