General

  • Target

    102600-187-0x0000000000550000-0x0000000000578000-memory.dmp

  • Size

    160KB

  • MD5

    1091f22c2a46c4c54428df679f3c356a

  • SHA1

    26854ed5da4c58fef873e49c059df10f6d4d8eed

  • SHA256

    a03ec5a28b7e7bbdbc5258bf38da2b5e7efbc77990cf5820896c6fe6523eb43a

  • SHA512

    44404c90a3ed4f8f5f7af44567a21cab6e7d4bc9d23b23900f664e454da0b0af1dcc2665f3a939652c2425d79367e8a86b2492ce394499c6a9a3602e846a2bf3

  • SSDEEP

    3072:OYO/ZMTFXfCR2RAYQDOOsYUBNwVlDFSyMPEhHSS36t:OYMZMBXf2YtBYUBNiTMEh8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@youlie_lzt

C2

89.23.96.53:31875

Attributes
  • auth_value

    4d6a429b89f6e4f0b0ed2ed92c2fd492

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 102600-187-0x0000000000550000-0x0000000000578000-memory.dmp
    .exe windows x86


    Headers

    Sections