General

  • Target

    2204-207-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    e5c7fc2d86adba108c6fcec23125119e

  • SHA1

    3aa350258a5532e45e6d17d58f441ce9ec8d7ca8

  • SHA256

    110c01b54a7f37c60ca221fb0f89be361e90329f01acc339779bb4ee44f7d3cc

  • SHA512

    b3926d376b644e715504aab6fe9905c0246b2e5f50d631aa288ec29a6911f4ddc151bafecb58dafca2e62010188b188c877441cc4e2f6a51d461db8ba5a51fbf

  • SSDEEP

    3072:pYO/ZMTFBVSInzatYuRFcprrrrSdVobDFzyRXBh1SSsU:pYMZMBBVSIGSuRFcHb0BBh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1337

C2

78.153.144.6:2510

Attributes
  • auth_value

    b0447922bcbc2eda83260a9e7a638f45

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2204-207-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections