General

  • Target

    1576-81-0x0000000000B40000-0x0000000000B60000-memory.dmp

  • Size

    128KB

  • MD5

    101d5ee8b30c9937691366896719cbb0

  • SHA1

    87aff5fa76b204e0ca28864f94f5103efa2e31bb

  • SHA256

    3eacb490455290130637ce83b86ae65e3739fa5865ed06037ebaa95cd518a91c

  • SHA512

    62e9c0ee6e41e3a540ff09ea82fb8975aea06a4acba284bfcd9ccf0a470eb6020470a2b8b01be79b1d01dbaeb85835ca275bc568b684a11a4966f39a3f45b882

  • SSDEEP

    3072:/cvFBgCYCpieID9L27lqeI6QcEhpTFhM4EASNH:/cvOfYlq9zcqFhM4jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@tag12312341

C2

62.204.41.144:14096

Attributes
  • auth_value

    71466795417275fac01979e57016e277

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1576-81-0x0000000000B40000-0x0000000000B60000-memory.dmp
    .exe windows x86


    Headers

    Sections