General

  • Target

    1728-61-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    b62e57fb266f448e7ca7285ef6af6a10

  • SHA1

    b58f132f89b636e00c3425492a7cbac159141da4

  • SHA256

    7dda12166192661bf31a8585ec6680e8b2adf1a52b126c4c70734803f158f6cc

  • SHA512

    c83fa7f839ca9343509ebb49cd0bf9a51caa372808c21b6056e709de2196cd0eaa104b4411c5862b67b7c8fc08154d521f67c7562c05354a91179e23b1825205

  • SSDEEP

    3072:7YO/ZMTFNR4vIwr0TGkHOo9iCVhDF6ywXwhPSS:7YMZMBNR4vIrJHOo9iAXowh

Malware Config

Extracted

Family

redline

Botnet

newserverbuild1

C2

lanalannnal.xyz:81

Attributes
  • auth_value

    bd5510edb235e67b045902bd8dce83de

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1728-61-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections