General

  • Target

    101336-356-0x0000000000480000-0x00000000004A8000-memory.dmp

  • Size

    160KB

  • MD5

    dfe3b6dceaba3ae75e8cf9d3839cb541

  • SHA1

    1fb54985bb2fceb6f77c39298251932ad01b2485

  • SHA256

    ebdf24f8759f19be5e544fa68b07e097e705d0f4153d94ca0cc2c178a9e41695

  • SHA512

    a2a4945be7d6e2c07261bc1111d5e0bb61a17f884e8e20f669f5c696fdf5cf9c5610d01777b50f3f5912411e4fae920e5f68d59338d3470f48a5154cecd6b87b

  • SSDEEP

    3072:FYO/ZMTFXHGJtjQ0lYpxN6VBDFvydPShhSSA6W:FYMZMBXHGJmWYpxNkQ9ShX

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @me_golds)

C2

77.73.134.27:7161

Attributes
  • auth_value

    e136da06c7c0400f4091dab1787720ea

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 101336-356-0x0000000000480000-0x00000000004A8000-memory.dmp
    .exe windows x86


    Headers

    Sections