General

  • Target

    95948-56-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    8abbf4ba77ab29e654cfa4c8391a85a4

  • SHA1

    2ccc299d8089988ed42ddda2d93c7aef51276d3a

  • SHA256

    b8330c2e9c166c1e960eee169136c0983c2affc76adfdf4fb0c31e916f1f8a09

  • SHA512

    67cc3a527f02e88014b519c21803d5b54dd9a4f95543dd83d72c3cd754057fecfb8672f3a6af3350348cbf46031cff6b288b9755c0283024378a92f2b0a822c9

  • SSDEEP

    3072:PYO/ZMTF5HBICjUbOtq7kPIETrlvVFHDF3yRX8hZSSx9:PYMZMB5HBIhitq7kPIETrJoB8h

Score
10/10

Malware Config

Extracted

Family

redline

C2

45.15.156.3:8296

Attributes
  • auth_value

    c59c4bb89d8784d080544ddd507a758f

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 95948-56-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections