General

  • Target

    820-110-0x00000000024E0000-0x0000000002524000-memory.dmp

  • Size

    272KB

  • Sample

    230213-psfmcadb82

  • MD5

    dd869bb733fe55871e6b823792f7e964

  • SHA1

    4a46bf86c9b804cf83d37f8c5bf63b6273e8e92f

  • SHA256

    d75bc68811efb9d6f21b38d79eb23ab9f8443a7d92209c6c51c915c861f9f0d2

  • SHA512

    bdbc7a7adbbec97c996c632e9812b16410d6802ac24e14acecc681f2bf56575f55e62c7d5b4c254a07c504e77f07e88fc0c013e840199cf85d420bb5728f4317

  • SSDEEP

    3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q

Malware Config

Extracted

Family

redline

Botnet

romik

C2

193.233.20.12:4132

Attributes
  • auth_value

    8fb78d2889ba0ca42678b59b884e88ff

Targets

    • Target

      820-110-0x00000000024E0000-0x0000000002524000-memory.dmp

    • Size

      272KB

    • MD5

      dd869bb733fe55871e6b823792f7e964

    • SHA1

      4a46bf86c9b804cf83d37f8c5bf63b6273e8e92f

    • SHA256

      d75bc68811efb9d6f21b38d79eb23ab9f8443a7d92209c6c51c915c861f9f0d2

    • SHA512

      bdbc7a7adbbec97c996c632e9812b16410d6802ac24e14acecc681f2bf56575f55e62c7d5b4c254a07c504e77f07e88fc0c013e840199cf85d420bb5728f4317

    • SSDEEP

      3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2O:p6jgppZsLKwuAexbpZghdnlQH5Q

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks