General

  • Target

    1712-149-0x00000000027B0000-0x00000000027F4000-memory.dmp

  • Size

    272KB

  • Sample

    230327-18n47she7v

  • MD5

    bf00fc10064bcbda9a993c4d598adf4b

  • SHA1

    6d7f91dd0f9c812cbdfa0fccb0ac6b4d916ca957

  • SHA256

    def4224547c54e6cff1044d5a8399ab19a127d8fc9bd5ba1be5f7195f8d86bb0

  • SHA512

    0b94a078c5a722697786cf4402fcc2f4cd0af1819544df7511b333e16ca599ce4fd01bdb7a44332aa9b6cc612f6d6eac20187df70d3a99c07ab595f5e6e5c9e4

  • SSDEEP

    3072:/z6jYELL6VXXCG/SyVXtwkw/em3EvLc9Cao40VBaw8hUJnSVJBb7xNn2pU9f2MK8:/z6jU1KyZtwLe2EvLcSJ8hinSVJB

Malware Config

Extracted

Family

redline

Botnet

rosn

C2

176.113.115.145:4125

Attributes
  • auth_value

    050a19e1db4d0024b0f23b37dcf961f4

Targets

    • Target

      1712-149-0x00000000027B0000-0x00000000027F4000-memory.dmp

    • Size

      272KB

    • MD5

      bf00fc10064bcbda9a993c4d598adf4b

    • SHA1

      6d7f91dd0f9c812cbdfa0fccb0ac6b4d916ca957

    • SHA256

      def4224547c54e6cff1044d5a8399ab19a127d8fc9bd5ba1be5f7195f8d86bb0

    • SHA512

      0b94a078c5a722697786cf4402fcc2f4cd0af1819544df7511b333e16ca599ce4fd01bdb7a44332aa9b6cc612f6d6eac20187df70d3a99c07ab595f5e6e5c9e4

    • SSDEEP

      3072:/z6jYELL6VXXCG/SyVXtwkw/em3EvLc9Cao40VBaw8hUJnSVJBb7xNn2pU9f2MK8:/z6jU1KyZtwLe2EvLcSJ8hinSVJB

    • RedLine

      RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    • RedLine payload

MITRE ATT&CK Matrix

Tasks