General

  • Target

    1576-55-0x00000000020C0000-0x00000000020FC000-memory.dmp

  • Size

    240KB

  • MD5

    50e50a1a02c44866766369163f7ba4f9

  • SHA1

    d0e6ce7e2b792403a9823f7a5b107a043a44f737

  • SHA256

    4e362b06bc8502bef9b5365da026dccf3dc388a7e6d2f4aab57325037f5ecdf3

  • SHA512

    a5a46c2ecc0aef5c4972f98b93b15d626d590026bb8d9be7014e8b302bbfd14fe972c3092ed30d43e6e4f9e9411ff37b9ec9efff7377f319215b2f48880b597b

  • SSDEEP

    6144:zjqDbaiJy8XJxF3z/k9/TWMDjKVDYMT2SjLFFlAhh:zjiw9/TWMDjQYMT2SjLFFlAh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

555

C2

tmanistiamel.xyz:80

Attributes
  • auth_value

    b46d05b384560fa4448cbd1dda7b15a2

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1576-55-0x00000000020C0000-0x00000000020FC000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections