Resubmissions

06-09-2022 17:55

220906-whfypaebgq 10

06-09-2022 17:53

220906-wgen8sghd5 10

General

  • Target

    4716-161-0x00000000005C0000-0x00000000005E0000-memory.dmp

  • Size

    128KB

  • MD5

    0c5f5ec5a805b0d991ded43002ccd529

  • SHA1

    f3e33b5d74d87efa30012c6e0d6c83767bde00db

  • SHA256

    2ab80377c52dc22f2cdf6776f564ec43576a8dacd5bbe9e99b61c876544f989a

  • SHA512

    c836ceb11008a69e5ac7833e4ac3965ea485120b18ed7b50c3247b12df2821c9feb674c901efb192ee81aba0af89fd3bce177c5c5b2f1c41bc74413420e2796c

  • SSDEEP

    3072:2cvFBICY5pidITxoXUyLs7DuQcd9jDiha4EASN3:2cv2HpyLs3nc3iha4jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nam5

C2

103.89.90.61:34589

Attributes
  • auth_value

    f23be8e9063fe5d0c6fc3ee8e7d565bd

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 4716-161-0x00000000005C0000-0x00000000005E0000-memory.dmp
    .exe windows x86


    Headers

    Sections