General

  • Target

    544-58-0x0000000002060000-0x000000000209C000-memory.dmp

  • Size

    240KB

  • MD5

    ab1ec30109a1379a0e3f74f611930d62

  • SHA1

    08f47591c44b01f3cb068f194708fe6b940fa612

  • SHA256

    2e0d54c8a3b38df830678984670ea90b1b4bdf0795ba67f834bb711741cdaa43

  • SHA512

    0e557e1d317a3fe2b074491216339417531c346f4d2b162466ab854fddf93da2c3eebb577434e9e099f8674691dcee2037367346daa5d949c69f13d2004998e1

  • SSDEEP

    3072:ojqTLQenQRonR7at62qaptH9RMVBw+0JOztoe/id8ohWAOubuAfS:ojq/Go4t62DB9RMV5lohX

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

2dwrK

C2

solpolas.com:8721

Attributes
  • auth_value

    70bdec8a6482631576e0f19c8c594e7b

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 544-58-0x0000000002060000-0x000000000209C000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections