General

  • Target

    19256-65-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    b95a20e575860bec77d356b8d1542da4

  • SHA1

    7dbf6cd39ca5138b1f421421c99cc6766e69a5b1

  • SHA256

    ae485131e0d3cf67e785b54e9bc81155054afaceb92e64ee46fc11dcd3c41676

  • SHA512

    43adbb63bb0cd6a43d178117f362b9c85b93293ba4205f58e5716fb94857d005b1806f51071b0e84bf952bcca868d6cf2fff207231ea28179df3589d8bf879b1

  • SSDEEP

    3072:AYO/ZMTFH3OIQjGnjepFNaVMDFryvPuhXSSo6g:AYMZMBH3OI1jepFN9gHuhJ

Malware Config

Extracted

Family

redline

Botnet

PremiumCloud#39

C2

151.80.89.227:45878

Attributes
  • auth_value

    67b0c0a4a5f21c8075be505887d2610f

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 19256-65-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections