General

  • Target

    2020-93-0x00000000023F0000-0x0000000002434000-memory.dmp

  • Size

    272KB

  • Sample

    230216-qn8m1ahc7v

  • MD5

    6e24c2cf9cc2ef90107f62f8048595e0

  • SHA1

    c470fe5612dcd0dec59c9a09da201c0c429d6767

  • SHA256

    1aa9cf2c806756d60fb1ec3dd4335710e3f6cb52f2a3fccd5f4f71633f4dc26d

  • SHA512

    4ea9fc324fded0452f3a180729d0b8696f09eb212f82b87f30d0589c4636c80a45abf0e56e451c42d2805f1aa385547bb1ce961a7d333d8775bfda29cb316e4d

  • SSDEEP

    3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wi:B6jodYx9cYKpzwAAh3nz

Malware Config

Extracted

Family

redline

Botnet

ruma

C2

193.233.20.13:4136

Attributes
  • auth_value

    647d00dfaba082a4a30f383bca5d1a2a

Targets

    • Target

      2020-93-0x00000000023F0000-0x0000000002434000-memory.dmp

    • Size

      272KB

    • MD5

      6e24c2cf9cc2ef90107f62f8048595e0

    • SHA1

      c470fe5612dcd0dec59c9a09da201c0c429d6767

    • SHA256

      1aa9cf2c806756d60fb1ec3dd4335710e3f6cb52f2a3fccd5f4f71633f4dc26d

    • SHA512

      4ea9fc324fded0452f3a180729d0b8696f09eb212f82b87f30d0589c4636c80a45abf0e56e451c42d2805f1aa385547bb1ce961a7d333d8775bfda29cb316e4d

    • SSDEEP

      3072:B6jIELf6FDTCLkYxJw6qxYgcgpiiSo40jm8dAhTrnz5XD1NxNn2pU9f2MKTV/wi:B6jodYx9cYKpzwAAh3nz

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks