General

  • Target

    147320-170-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    b8c3170012a55917539abfb058689dba

  • SHA1

    73381c90578ce1c22b4ffb08ad15d5e219f71514

  • SHA256

    6c50583cbd660a280b02f2985ac17d1745bf8eef6fa81b899e62e5c21fb15f19

  • SHA512

    c62702b6ee2cd5c2514158415b68ecdcd667b9cbcfc410390d21c207b618741cc92a89309ac75240c67e37e83bdb2fb7622a6fb41f3e37530481800c08a8d0f6

  • SSDEEP

    1536:oxGETCdhRendsAaO/7DJ3Ivv7RTScOc7qFk8pfAUO+bG7buc+VJPji4d0wuei1/y:sGEguEkmQNceFk8hAF+CnFOFi4dh0qn

Score
10/10

Malware Config

Extracted

Family

redline

C2

193.106.191.160:8673

Attributes
  • auth_value

    b452e7074eb79e37fc942576d3e3c701

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 147320-170-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections