General

  • Target

    102760-256-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    6a994c3c0a024201ab006918c14b9252

  • SHA1

    c9cccaa78454ca59d18ba50af19f6cabc9d4f15e

  • SHA256

    c21cb5043453f2099d563d4cb73ddb7f397b52a00dfdad0659b560e059479b6d

  • SHA512

    199ff559478f39a059fd1304672631b3ecb4388c6985a61944372e19640203e7f09fc384802907ea6b9a5309e41b4c721c04b51adf4ab3c0734330afe5e69324

  • SSDEEP

    3072:HYO/ZMTFzDaAN7s2SgT9FWIcXVVDFZ8RP3hcSSIT:HYMZMBzDaAq2d9FWrPMp3h

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @mr_golds)

C2

77.73.134.27:7161

Attributes
  • auth_value

    4b2de03af6b6ac513ac597c2e6c1ad51

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 102760-256-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections