General

  • Target

    99516-56-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    7e6930e673656441f542fed0268985d8

  • SHA1

    01b40d18a3ecdb76dfdacc51e934b672580e482e

  • SHA256

    67b38da92f35888bb638845bf2bdbc39ec98357389c00782bf7fff13caabafe1

  • SHA512

    129b48eb46a5b11267096156d1dc694f42114b1a39f23793782d7ca0d045a8979a65bb3ce6179e85e91a6aba7106d3d0009c3d23194ed4326f08e809ccb376ea

  • SSDEEP

    3072:eYO/ZMTF+dwo4TImXDKj1VUDFSyuPLhFSS4q:eYMZMB+dwoPWDKj8TuLh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@cool_man717

C2

79.137.195.87:41315

Attributes
  • auth_value

    d2ec1c50eaab1c677b88f377ee3162f2

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 99516-56-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections