General

  • Target

    14136-252-0x0000000000790000-0x00000000007B0000-memory.dmp

  • Size

    128KB

  • MD5

    3c950df1784bb35e691b7b15dd38be35

  • SHA1

    f5085823a12d352f7e319c618c6325f4e7154aa8

  • SHA256

    bf6645c1b80bf47d55b872c6455b8cd9b8aa430050106c208c0b650cea9ded40

  • SHA512

    d0c68b6a8770179e582228f7f6dde7d377554b169172dcc4356249250345a3e448729113ab71bc60dcab6de006777c2057d6e7de31e4b0f7abe8f04156993550

  • SSDEEP

    3072:CcvFBICY0piFIpTE4SNSVg6XmP7cTY00DNhl4EASNf:CcvmkkNSVtgcTqNhl4jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

8888

C2

103.89.90.61:12036

Attributes
  • auth_value

    0234674e8f564170371b0b0ab9952ce1

Signatures

  • RedLine Payload 1 IoCs
  • Redline family

Files

  • 14136-252-0x0000000000790000-0x00000000007B0000-memory.dmp
    .exe windows x86


    Headers

    Sections