General

  • Target

    101320-247-0x00000000003B0000-0x00000000003D8000-memory.dmp

  • Size

    160KB

  • MD5

    c6769b956fa4d7411e5d5ae2e59e5a15

  • SHA1

    f28d6674dcd0685150e8d72402548daa9074336e

  • SHA256

    5492bf2e0c48850f14e061526fa60b844a56167694aea3df9e32f137a04a96c7

  • SHA512

    f90b4843d2fac59cdcad029c4e1387aab73056eb7cde6b7c279643b05dbc0827dc7e30c544374c169cd1e68adad0a5046c901e75f973616357d90279ffc7ef3b

  • SSDEEP

    3072:pYO/ZMTFJtXkRzqOnPwQJp2VoDF3yRXHhdSSVS:pYMZMBJtXkgKoQhIBHh

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @mr_golds)

C2

77.73.134.27:8163

Attributes
  • auth_value

    4b2de03af6b6ac513ac597c2e6c1ad51

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 101320-247-0x00000000003B0000-0x00000000003D8000-memory.dmp
    .exe windows x86


    Headers

    Sections