General

  • Target

    832-92-0x0000000000080000-0x00000000000A0000-memory.dmp

  • Size

    128KB

  • MD5

    3192ad2bd7eb1e1eb007819ca4ae2a10

  • SHA1

    1871244fd1a94d3d612aecd0fccd41c81e944fba

  • SHA256

    214c29b70ef187827b139920b34bca9332bda7099f8a163b6a8326d6f9e8b52f

  • SHA512

    1754861fe7f207312c749e5e72656b609a8de8f30c7b11a6c1ca1943769308d97e45dd068c68eb234a037e98f4e955eca08586ba6b5e3bd2117844ba5d2b32c8

  • SSDEEP

    3072:4cvFBQCYCpiSIPj/j732jOpy7cwcuTgh+4EASN:4cvO7T32y+c2gh+4jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Mant Pirate

C2

185.222.57.238:27519

Attributes
  • auth_value

    82d8a28b8dcfaa5f68b8c7b8a8f7c64b

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 832-92-0x0000000000080000-0x00000000000A0000-memory.dmp
    .exe windows x86


    Headers

    Sections