General

  • Target

    988-108-0x0000000002150000-0x0000000002194000-memory.dmp

  • Size

    272KB

  • Sample

    230202-gtrf8sfc36

  • MD5

    3cb5293bc4fb724df52c542f796c4b68

  • SHA1

    080200b7efa1805a26f5e43c7177aa6730cde23b

  • SHA256

    5f5c17635475dafb34ca1da776262c7c9ae82b17e163f4b2fc9b2845794cad2b

  • SHA512

    5778c315602573a660c7321221cc14d309a9f7d2f7a8ba51afc844d9cba33b5d8ee7a965277d1a6adc852e002cecae10e21498b22b712f1a6aa59edccc313076

  • SSDEEP

    3072:F6jYELp6VFxCjegd9zQRRa0TwOkNwZsmLodSxm4miwo402otLh3An87q3xNn2pUa:F6j+HM9zQPa/5NwpLodSdm2Lhwn87

Malware Config

Extracted

Family

redline

Botnet

milaf

C2

193.233.20.5:4136

Attributes
  • auth_value

    68aaee25afe3d0ae7d4db09dea02347c

Targets

    • Target

      988-108-0x0000000002150000-0x0000000002194000-memory.dmp

    • Size

      272KB

    • MD5

      3cb5293bc4fb724df52c542f796c4b68

    • SHA1

      080200b7efa1805a26f5e43c7177aa6730cde23b

    • SHA256

      5f5c17635475dafb34ca1da776262c7c9ae82b17e163f4b2fc9b2845794cad2b

    • SHA512

      5778c315602573a660c7321221cc14d309a9f7d2f7a8ba51afc844d9cba33b5d8ee7a965277d1a6adc852e002cecae10e21498b22b712f1a6aa59edccc313076

    • SSDEEP

      3072:F6jYELp6VFxCjegd9zQRRa0TwOkNwZsmLodSxm4miwo402otLh3An87q3xNn2pUa:F6j+HM9zQPa/5NwpLodSdm2Lhwn87

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks