General

  • Target

    544-58-0x0000000002060000-0x000000000209C000-memory.dmp

  • Size

    240KB

  • Sample

    220929-l8f19sadf7

  • MD5

    ab1ec30109a1379a0e3f74f611930d62

  • SHA1

    08f47591c44b01f3cb068f194708fe6b940fa612

  • SHA256

    2e0d54c8a3b38df830678984670ea90b1b4bdf0795ba67f834bb711741cdaa43

  • SHA512

    0e557e1d317a3fe2b074491216339417531c346f4d2b162466ab854fddf93da2c3eebb577434e9e099f8674691dcee2037367346daa5d949c69f13d2004998e1

  • SSDEEP

    3072:ojqTLQenQRonR7at62qaptH9RMVBw+0JOztoe/id8ohWAOubuAfS:ojq/Go4t62DB9RMV5lohX

Malware Config

Extracted

Family

redline

Botnet

2dwrK

C2

solpolas.com:8721

Attributes
  • auth_value

    70bdec8a6482631576e0f19c8c594e7b

Targets

    • Target

      544-58-0x0000000002060000-0x000000000209C000-memory.dmp

    • Size

      240KB

    • MD5

      ab1ec30109a1379a0e3f74f611930d62

    • SHA1

      08f47591c44b01f3cb068f194708fe6b940fa612

    • SHA256

      2e0d54c8a3b38df830678984670ea90b1b4bdf0795ba67f834bb711741cdaa43

    • SHA512

      0e557e1d317a3fe2b074491216339417531c346f4d2b162466ab854fddf93da2c3eebb577434e9e099f8674691dcee2037367346daa5d949c69f13d2004998e1

    • SSDEEP

      3072:ojqTLQenQRonR7at62qaptH9RMVBw+0JOztoe/id8ohWAOubuAfS:ojq/Go4t62DB9RMV5lohX

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks