General

  • Target

    100768-271-0x0000000000150000-0x00000000001B0000-memory.dmp

  • Size

    384KB

  • MD5

    5ed2e5e34210fadbdbc7020edd0d9a79

  • SHA1

    278ffa6a07bf8b73bbe7a037548b1515448a0d71

  • SHA256

    3843679ac6f31d9dfdce088aaeb7f080bf4b03bfee3b6f9562cdcd98dc078bbf

  • SHA512

    47393974c24e93c7d4b51a3ad1daca15c15ae98e473fe91bbb0f11a8d9344c3ca3d47184cc184611b678ff943c88e858f621bd4084c71917cb1dd0928a71d4b6

  • SSDEEP

    6144:NxRs09r3Qg47/AVKA4Q1LV9262XuChEuYNXSuh01UhJRJwL//9JrFdyks88mt9zh:7Z5kIKA4QRV/eAuYAU01UhJRJwL//9J5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@Geralt_Work

C2

84.38.189.24:40966

Attributes
  • auth_value

    b3a5a978ca6c153133c1e3c861610714

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 100768-271-0x0000000000150000-0x00000000001B0000-memory.dmp
    .exe windows x86


    Headers

    Sections