General

  • Target

    86848-152-0x0000000000760000-0x0000000000788000-memory.dmp

  • Size

    160KB

  • MD5

    6ab255bc8a36c0ab4becedba304a32cc

  • SHA1

    f6c32a655538751a69868505c66e0e7544c7fa98

  • SHA256

    dcbe0f7f000bc82b899675d5740b2336dcdc4eacc3de4d28e42fe9c70439727a

  • SHA512

    c9f0a2b8600339d3fa1d86dae9a446c39ae20c436496da436881d11c064a70c062566962d40549b95b4a7ab7dfcb2246595a3fe16236fa875d69383dc23bdad2

  • SSDEEP

    3072:mYO/ZMTFJtXkRzqOnPwQJp2VoDF3yRXHhdSSOS:mYMZMBJtXkgKoQhIBHh

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @mr_golds)

C2

77.73.134.27:8163

Attributes
  • auth_value

    4b2de03af6b6ac513ac597c2e6c1ad51

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 86848-152-0x0000000000760000-0x0000000000788000-memory.dmp
    .exe windows x86


    Headers

    Sections