General

  • Target

    23548-159-0x0000000000540000-0x0000000000568000-memory.dmp

  • Size

    160KB

  • MD5

    d8a0519110c9db68606d22c8c208c628

  • SHA1

    f422236bc4fcee57e5e6cebe23c8ff83e4d83e0e

  • SHA256

    92763474feab5a9d3d697ce9271972cd139880a87b1ae79b366677953dfda920

  • SHA512

    e2e391fbe558d480bf05d092ec008d1a6edd070a340e66d031c180686b69f55199c16e2137a2953f68af89d3f71d22efe7baf27fa1ae622a008d95e670f6cd00

  • SSDEEP

    3072:jYO/ZMTFBdwo4TImIQOUaOPVNDFfyRPkphVSS8r:jYMZMBBdwoP7UaOjApgh

Malware Config

Extracted

Family

redline

Botnet

newbildpodslovarik

C2

78.153.144.6:2510

Attributes
  • auth_value

    812af4ac0a58401d7379ba8cc6c5c5b1

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 23548-159-0x0000000000540000-0x0000000000568000-memory.dmp
    .exe windows x86


    Headers

    Sections