General

  • Target

    1784-60-0x00000000009B0000-0x00000000009F4000-memory.dmp

  • Size

    272KB

  • Sample

    230213-y2rweafd21

  • MD5

    40f77cb3bb51cb92e6ed1b15f141ba1f

  • SHA1

    8ddba24daa369dd6e725de765b532200fe32fc72

  • SHA256

    2a1c53f65d0dbb32019bdb2bccb0b1a0f30013e34985e268c6b322e95a1e8444

  • SHA512

    350eb275263c951de93f24f0e49d40101bd93aac84ce890d0a05a585291deab698bea4c5082959a263b6b1034bef1f760e53db08c3ffc0c560d71f190bcdb63a

  • SSDEEP

    3072:B6jNEL96TPqCuRwHMrtsPeVTesnnsB4zuMi1o40CAMBUhcznA9JQxNn2pU9f2MKg:B6jjGw6GPIemnUquMSUhgnA9sX/

Malware Config

Extracted

Family

redline

Botnet

yarbaytom

C2

20.100.204.23:41570

Attributes
  • auth_value

    d3d4e220daa221c3e8cc099b63412600

Targets

    • Target

      1784-60-0x00000000009B0000-0x00000000009F4000-memory.dmp

    • Size

      272KB

    • MD5

      40f77cb3bb51cb92e6ed1b15f141ba1f

    • SHA1

      8ddba24daa369dd6e725de765b532200fe32fc72

    • SHA256

      2a1c53f65d0dbb32019bdb2bccb0b1a0f30013e34985e268c6b322e95a1e8444

    • SHA512

      350eb275263c951de93f24f0e49d40101bd93aac84ce890d0a05a585291deab698bea4c5082959a263b6b1034bef1f760e53db08c3ffc0c560d71f190bcdb63a

    • SSDEEP

      3072:B6jNEL96TPqCuRwHMrtsPeVTesnnsB4zuMi1o40CAMBUhcznA9JQxNn2pU9f2MKg:B6jjGw6GPIemnUquMSUhgnA9sX/

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks