General

  • Target

    940-155-0x0000000004960000-0x00000000049A4000-memory.dmp

  • Size

    272KB

  • Sample

    230318-swcxeacg42

  • MD5

    8f6b8027e13fe61879bf3224e71c102f

  • SHA1

    ec020a21b2fc01b58c00dea25e3aff152bc33143

  • SHA256

    39585b9881e624de31e7e7e98f325c025d233df979322986310ee623eb024fdc

  • SHA512

    ad820aa9d9094b250f2eb32d307738b76f13cd9f980fbf481885172cc7301fae90923c583c223fe197bb8eb41507c4c088cbef5ebd9a6a689442152a8369d903

  • SSDEEP

    3072:96jYELp6VFxCCWosai9QFwNsmLo0gacrilo40OTkQhOEnISw+dvoxNn2pU9f2MKL:96j+GosvqFwtLo0yr3QhZnI

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Targets

    • Target

      940-155-0x0000000004960000-0x00000000049A4000-memory.dmp

    • Size

      272KB

    • MD5

      8f6b8027e13fe61879bf3224e71c102f

    • SHA1

      ec020a21b2fc01b58c00dea25e3aff152bc33143

    • SHA256

      39585b9881e624de31e7e7e98f325c025d233df979322986310ee623eb024fdc

    • SHA512

      ad820aa9d9094b250f2eb32d307738b76f13cd9f980fbf481885172cc7301fae90923c583c223fe197bb8eb41507c4c088cbef5ebd9a6a689442152a8369d903

    • SSDEEP

      3072:96jYELp6VFxCCWosai9QFwNsmLo0gacrilo40OTkQhOEnISw+dvoxNn2pU9f2MKL:96j+GosvqFwtLo0yr3QhZnI

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks