General

  • Target

    2388-201-0x0000000000600000-0x0000000000620000-memory.dmp

  • Size

    128KB

  • MD5

    b96e82d1387a973319e7874a0446de1f

  • SHA1

    f957679d6662b2db29208f087e790dacadab70a5

  • SHA256

    86571560907f7b0cde2ecfa42c7dd2a40e2298d8c6e7d7ee91ca42605ee5525b

  • SHA512

    6ad4a6fdfbdfcbfe40ec0e62f47948be7dce9556264c65a22e53893097a64f1db45ba3f193ca65e704a8b4957ca3520152085bb90635efd9dc431594d783e863

  • SSDEEP

    3072:AGhlBNCnWYzKId96bjxTJAH1gAI5Bhu0Tqh4goaSI:AGhM3iTHLBqh4gvS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

install

C2

31.41.244.109:3590

Attributes
  • auth_value

    eb23a0ca5a38a3bf1eb16b2f08524f35

Signatures

  • RedLine Payload 1 IoCs
  • Redline family

Files

  • 2388-201-0x0000000000600000-0x0000000000620000-memory.dmp
    .exe windows x86


    Headers

    Sections