General

  • Target

    1460-58-0x0000000002100000-0x0000000002144000-memory.dmp

  • Size

    272KB

  • Sample

    230201-jkg8baec3v

  • MD5

    a66bd33f061e425688db1cb654570dc4

  • SHA1

    84b4fd69e0ace880d29442f9462a1983abfe6872

  • SHA256

    746fed8b3ef8462037bdb312b52ea4875a79d0cd651710c7b687c345fedc1c41

  • SHA512

    bfb097a9c368e3847795b9bb4f14cd4bb7dfd953b20af3a96110d29002308ffe51814fd0185d44dcbb4e5d5fce9ae2055140691be6eb9536efd3bc5e93b3d55d

  • SSDEEP

    3072:tT6jgELx6GNZCKN4dI0wKbroqlwZsmLoG3vXDCvgJo40DHw3hJPn/j2nwxNn2pUl:tT6jdJ4dI0hoqlwpLo4Y83hFn6

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1

C2

138.124.183.137:48862

Attributes
  • auth_value

    63347a605fdd4b113180332821529963

Targets

    • Target

      1460-58-0x0000000002100000-0x0000000002144000-memory.dmp

    • Size

      272KB

    • MD5

      a66bd33f061e425688db1cb654570dc4

    • SHA1

      84b4fd69e0ace880d29442f9462a1983abfe6872

    • SHA256

      746fed8b3ef8462037bdb312b52ea4875a79d0cd651710c7b687c345fedc1c41

    • SHA512

      bfb097a9c368e3847795b9bb4f14cd4bb7dfd953b20af3a96110d29002308ffe51814fd0185d44dcbb4e5d5fce9ae2055140691be6eb9536efd3bc5e93b3d55d

    • SSDEEP

      3072:tT6jgELx6GNZCKN4dI0wKbroqlwZsmLoG3vXDCvgJo40DHw3hJPn/j2nwxNn2pUl:tT6jdJ4dI0hoqlwpLo4Y83hFn6

    Score
    10/10
    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks