General

  • Target

    980-87-0x0000000002360000-0x00000000023A4000-memory.dmp

  • Size

    272KB

  • Sample

    230215-k7vycsbb92

  • MD5

    789d0fb17c26fcf74053bf3c9252618e

  • SHA1

    71de4142dc323614bc3f1d2bddc83580985cebda

  • SHA256

    8a773b3858405dc030ff7a53f63b3552631c9db3cdf30c3b516234598feda09b

  • SHA512

    f7f4dc197328b92bb8c4ff3d13131f27ab76493f1adec77255b2b68f08257b2b22f0ff472c926862287c5d8473e85b677b782fd820c17697f0e508a8fe11e8de

  • SSDEEP

    3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wiB:B6jodYx9cYKpzwAAh3nzq

Malware Config

Extracted

Family

redline

Botnet

ruma

C2

193.233.20.13:4136

Attributes
  • auth_value

    647d00dfaba082a4a30f383bca5d1a2a

Targets

    • Target

      980-87-0x0000000002360000-0x00000000023A4000-memory.dmp

    • Size

      272KB

    • MD5

      789d0fb17c26fcf74053bf3c9252618e

    • SHA1

      71de4142dc323614bc3f1d2bddc83580985cebda

    • SHA256

      8a773b3858405dc030ff7a53f63b3552631c9db3cdf30c3b516234598feda09b

    • SHA512

      f7f4dc197328b92bb8c4ff3d13131f27ab76493f1adec77255b2b68f08257b2b22f0ff472c926862287c5d8473e85b677b782fd820c17697f0e508a8fe11e8de

    • SSDEEP

      3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wiB:B6jodYx9cYKpzwAAh3nzq

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks