General

  • Target

    27428-339-0x0000000000170000-0x0000000000198000-memory.dmp

  • Size

    160KB

  • MD5

    29b2a3e6b1f2e20b426e1e43ae7284ff

  • SHA1

    2da956fa2bf1ff52d86148f5e80b101c122dba80

  • SHA256

    f9b977cee5ca00413461086e414a4c6a4b74fb8cf03b65c087c4b294308a7e3b

  • SHA512

    712a6eb8bc35fb5fd8a6ba3fc0be5e921d778e8d648bdd80b7bf66e0b837ab23d9917aea60e90bd6ede77ae94a9f4653dc7e956e54cb638c7301a0d5c53e1441

  • SSDEEP

    3072:6YO/ZMTFBNaoXzCwfVGpy5VlDFwBRPGhuSS9e:6YMZMBBNao+EVGpyp8pGh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

11

C2

51.89.201.21:7161

Attributes
  • auth_value

    e6aadafed1fda7723d7655a5894828d2

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 27428-339-0x0000000000170000-0x0000000000198000-memory.dmp
    .exe windows x86


    Headers

    Sections