General

  • Target

    102780-258-0x00000000007B0000-0x00000000007D8000-memory.dmp

  • Size

    160KB

  • MD5

    60938cb175333842517091523d815db5

  • SHA1

    bbaeeddc617e207b2662d99981cd3e65abbcdf01

  • SHA256

    7b07bcea267b219075dc1366038d839821cd645b4878a2d52cab1053b53845f5

  • SHA512

    fa405e5ff7a8b1d3c8aa62a524baf315aaa9410b158337d74c4a5f0cc3b07fdae9d07e2d7baf6db017a4650793f57cee53cbb913a6fc7dab5a926e8d9d39b563

  • SSDEEP

    3072:2YO/ZMTFBNaoXzCwfVGpy5VlDFwBRPGhuSShe:2YMZMBBNao+EVGpyp8pGh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

11

C2

51.89.201.21:7161

Attributes
  • auth_value

    e6aadafed1fda7723d7655a5894828d2

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 102780-258-0x00000000007B0000-0x00000000007D8000-memory.dmp
    .exe windows x86


    Headers

    Sections