General

  • Target

    1688-110-0x0000000000CD0000-0x0000000000D14000-memory.dmp

  • Size

    272KB

  • Sample

    230213-vp8fvaeg45

  • MD5

    a932b8d3b09cd8e7daff00aa27f178aa

  • SHA1

    4dbbbca605255b9f9ca180bb7f462faea75278ec

  • SHA256

    8b90d64d0db20c024808b1cea6f397743d2af679c04f9e3766408c1dd2046c9d

  • SHA512

    faf6213d505f200d5415159d7cd79c0cf080198401594c1458ee2ebad4d5d5c2542e4990e6b2e42938f3e312c1fa05b6afa61a3ce6aec1d5f761e271b855e909

  • SSDEEP

    3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2N:p6jgppZsLKwuAexbpZghdnlQH5Q+Z

Malware Config

Extracted

Family

redline

Botnet

romik

C2

193.233.20.12:4132

Attributes
  • auth_value

    8fb78d2889ba0ca42678b59b884e88ff

Targets

    • Target

      1688-110-0x0000000000CD0000-0x0000000000D14000-memory.dmp

    • Size

      272KB

    • MD5

      a932b8d3b09cd8e7daff00aa27f178aa

    • SHA1

      4dbbbca605255b9f9ca180bb7f462faea75278ec

    • SHA256

      8b90d64d0db20c024808b1cea6f397743d2af679c04f9e3766408c1dd2046c9d

    • SHA512

      faf6213d505f200d5415159d7cd79c0cf080198401594c1458ee2ebad4d5d5c2542e4990e6b2e42938f3e312c1fa05b6afa61a3ce6aec1d5f761e271b855e909

    • SSDEEP

      3072:p6j4ELH6Vt7CENpmh6sLKR+utY/edHbpiWo40mTJghm0nlQoYKgQmExNn2pU9f2N:p6jgppZsLKwuAexbpZghdnlQH5Q+Z

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks