General

  • Target

    2768-237-0x0000000000400000-0x0000000000420000-memory.dmp

  • Size

    128KB

  • MD5

    218be5cd94a71022c2140740c9ff7d10

  • SHA1

    98b1747c27ff373ff13c95564efbefb75abfa805

  • SHA256

    9163669b6133faaff315ffa3cfc2d0727b71ca8d719d8a462e0ce050374321ca

  • SHA512

    fbab0cf10e7986ba99c84d6be987850424c5c05fc8dbd28e38b01255b32a1fcea80eb36d45a690178997681723cb285ab2c9767c75dadc524fd8f0284709e385

  • SSDEEP

    3072:XZkqs4bLjlp5q8+6A2kW68k7dqj/PVmIJv8:S4bLjlp5q8+7rmq

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

chris

C2

194.104.136.5:46013

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2768-237-0x0000000000400000-0x0000000000420000-memory.dmp
    .exe windows x86


    Headers

    Sections