General

  • Target

    2296-229-0x0000000000400000-0x0000000000420000-memory.dmp

  • Size

    128KB

  • MD5

    8f359930e20b0ec1cf0f8da0bdb90b72

  • SHA1

    e337b4d5a385f9cadad27edf327266bbd5a31d3b

  • SHA256

    f523bdf335913efa1301aaba1ba10e7a009888fe88e49dc7f558cc82406e3791

  • SHA512

    a2582433aa91c3a42a00851c06b6f0527cffecf0f9febe62fd6d54728a8cff9917532316a854bff0ba31739f22086f0cd1264a7e32fda585858391d9013c5d99

  • SSDEEP

    3072:3ZEqsAbLjlp5qce3lPW7aOk7L8rPVhIJvA:yAbLjlp5qceBYa33+

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

srtupdate33

C2

135.181.129.119:4805

Attributes
  • auth_value

    b69102cdbd4afe2d3159f88fb6dac731

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2296-229-0x0000000000400000-0x0000000000420000-memory.dmp
    .exe windows x86


    Headers

    Sections