General

  • Target

    832-58-0x0000000000070000-0x0000000000098000-memory.dmp

  • Size

    160KB

  • MD5

    9b9d3f26aa3a1bea994a1c70e03d5c06

  • SHA1

    29543524ab7af241df3e85fa7b849f336a91d09c

  • SHA256

    3ecd8b23fd7a59c8ba2e7aa42f9046bb096e24ee47903c35032cbe01bdb5b487

  • SHA512

    ac846e9381259c4e7d7c5cd4b9c68b0e1930d39abdeb4860ebb49f268aa35522ef10686473e56e7b57ea60541aaf1fa93beae751e8a8964094170ab9b4c2ea9d

  • SSDEEP

    3072:ZYO/ZMTFgnAILj04cuRFcDrrrrc/VitDFzyRXlhfSS:ZYMZMBgnAI8zuRFcvtUBlh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

crtest

C2

denestyenol.xyz:81

Attributes
  • auth_value

    ac9c5d38bbc1b733c499deeab5940e0d

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 832-58-0x0000000000070000-0x0000000000098000-memory.dmp
    .exe windows x86


    Headers

    Sections