General

  • Target

    99204-56-0x0000000000400000-0x0000000000460000-memory.dmp

  • Size

    384KB

  • MD5

    0701499db3ee51ac4daa239f8f2b763e

  • SHA1

    ec2ed9d81dcc123c195578e8d96a4e84627a2ce9

  • SHA256

    b7a28164c0d92c629bf003058d698d7e42d71efbd6b0f2159ccb98423201bd99

  • SHA512

    50fd794f2fee119f6ab1c460c5f6c983058166873dd206f153d93f60ab0bfcb99f00425229fc90126729f6713c1ca1cefe0c855b2a5e2265343d3dc8b7bc2745

  • SSDEEP

    6144:hNT35vfEfPTcfyQ9i9GI6Tam9ozDkpDtSCTGGXsWVFvh7if3QVtLuu7wODmluB5F:/VfsPh0PaEozDkpDtSCTGGXsWVFvh7ia

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

0000

C2

13.72.81.58:13413

Attributes
  • auth_value

    d8d0ebeb4b8d355bc1d40efd13776435

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 99204-56-0x0000000000400000-0x0000000000460000-memory.dmp
    .exe windows x86


    Headers

    Sections