General

  • Target

    3284-133-0x0000000000400000-0x0000000000420000-memory.dmp

  • Size

    128KB

  • MD5

    8c03ac049ffe6e842645fafad7178214

  • SHA1

    8cd8d48f30e57fda36fcc0d4dc34aee6057f91ec

  • SHA256

    11048cf889356ec5b06ac824b8a04c433f90ebfed9408fd2f9e38bfe18f1740f

  • SHA512

    861bbd4526e88219e3cdbcbc01e6ad4c56111314b20219cbbea5a800b1bf502934f1116684d7f3e4f7e102d15eed552d22ad0a3308ba14173cbefb48fb5cc314

  • SSDEEP

    1536:gRxakCr5Q2IlAJcGXh4SQtr8x+UULrf4HLF3vumlbuZgV37B30wuei6ILZ:wCr5QKT8LUULrf4HLR26ZLB3hed

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@ansdvsvsvd

C2

46.8.220.88:65531

Attributes
  • auth_value

    d7b874c6650abbcb219b4f56f4676fee

Signatures

  • RedLine Payload 1 IoCs
  • Redline family

Files

  • 3284-133-0x0000000000400000-0x0000000000420000-memory.dmp
    .exe windows x86


    Headers

    Sections