General

  • Target

    3484-121-0x0000000000400000-0x0000000000420000-memory.dmp

  • Size

    128KB

  • MD5

    126cf6f4095335e124a2f236db31a9c2

  • SHA1

    3966bc2bd4460070e9985216f6c2e56b05ead497

  • SHA256

    4dcb725ddae1896361b816b5562923e7381609b40269cbff7a95e9e5a21574ed

  • SHA512

    8d3e936debcb5b58e1571ce21bfe2be4dfb60c0e7eace261efbc686cc79071e3f7299948aaf5786f7191ac7a0971a40a4ca847df18d1d4e04267ed9f3e4aa111

  • SSDEEP

    3072:PMEisgbLjlp5qMeCMZUx4tk7OF3PNrIJvnn:R4bLjlp5qMeW470l

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

media26

C2

91.121.67.60:23325

Attributes
  • auth_value

    e37d5065561884bb54c8ed1baa6de446

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3484-121-0x0000000000400000-0x0000000000420000-memory.dmp
    .exe windows x86


    Headers

    Sections