General

  • Target

    2256-133-0x0000000000450000-0x0000000000478000-memory.dmp

  • Size

    160KB

  • MD5

    b4b0fbb8f6991837486ce431f3a5d4df

  • SHA1

    85ace38b9de40a8afc7f18243ed3c4046aec7bca

  • SHA256

    16ce75fee0b627a42dc4259de9001967daa548ac98f497e171190ef79a95f7d7

  • SHA512

    9849bae2a29cc3f152ddebcda7eb77fffc27c32eeb93f652ea364fd462cdd601ba26c57f76410fb6f7fad7bf580d4a2153d7fbb6c4d6a515ae3268dfd0f96c55

  • SSDEEP

    3072:vYO/ZMTFjbSI4r7Cvo0+JqbxVpDF1wRXgh5SSoV:vYMZMBjbSIMV0+Jqb90Bgh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sep16as3

C2

185.215.113.122:15386

Attributes
  • auth_value

    40bb2fe8692bc4f8451694273411f3ae

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2256-133-0x0000000000450000-0x0000000000478000-memory.dmp
    .exe windows x86


    Headers

    Sections