General

  • Target

    98748-56-0x0000000000400000-0x0000000000460000-memory.dmp

  • Size

    384KB

  • MD5

    7aa1a8dd2883d775190e3a8abe668346

  • SHA1

    b601830d31d4191d5e5007f433a5aafab72c40f7

  • SHA256

    87dd6dec7d0bbd00d1f0ddbc2fc5410d0907623cb175ec2bb266864365b70339

  • SHA512

    5bea556def894de28475bff415ecc47ed60b497cca1545c1d48b9fab5e3b58818393e355118ac477fe8e03b1e2bee68a0fda98bbe7e9f1bd1fe9a08f3d16578c

  • SSDEEP

    6144:ha6/rGEN8xWv5+qi7yJCof+UKPRG9hNd6kZdvuxPI5ads4u606M8DBY:PiG75+qVxKPRG9hNd6kZdvuxPI5ads4M

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

000

C2

13.72.81.58:13413

Attributes
  • auth_value

    38039bd2797907beafc7799127f1af5b

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 98748-56-0x0000000000400000-0x0000000000460000-memory.dmp
    .exe windows x86


    Headers

    Sections