General

  • Target

    131056-83-0x0000000000400000-0x0000000000420000-memory.dmp

  • Size

    128KB

  • MD5

    8885d4b3b79779512047a5812e1436ca

  • SHA1

    b0ca82333bbce6234e7a6bcd3b40fdc0f9a71fd2

  • SHA256

    03ba22725b078787127d7188e6e031637eee34a298bb19e2b2fcf6e354ef99e4

  • SHA512

    a52653d7762d6ab38f926e815a2130c0fe93efe67ea65018c16e750dc3f37a253fda86fbb6698ee82cb82c30cdc2e901eff9aa6d42c597578d6c25b6df75fd8d

  • SSDEEP

    3072:2cvFBgCYFpiFIBUsVMYZ4qUhQcLkaDbhW4EASNg:2cve3yYZ4V6cBbhW4jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@moriwWs

C2

litrazalilibe.xyz:81

Attributes
  • auth_value

    c2f987b4e6cd55ad1315311e92563eca

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 131056-83-0x0000000000400000-0x0000000000420000-memory.dmp
    .exe windows x86


    Headers

    Sections