General

  • Target

    2224-150-0x0000000000760000-0x0000000000788000-memory.dmp

  • Size

    160KB

  • MD5

    5969550fa5b5abc4db85f5029b84e687

  • SHA1

    91680bf721f2bbcc19dc9f09b943be3986813633

  • SHA256

    a7837e6c58741b8167e66ac67622d7efd6da8e5d0d19dd5a9985cab08a7091fa

  • SHA512

    380ff9ec66fca68f244e572d83bcd5a558485c013165eaaadfc966b76fbb849a59013a864da7a24ac9755e7c614d10655586bb32eaac2fdba45ea93d48b17fad

  • SSDEEP

    3072:JYO/ZMTF/H+IQjWbW0+Hx4OYB1VlDFuyCX1h6SScq:JYMZMB/H+IFSdx4O89L61h

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

04.10 docx

C2

82.115.223.18:47594

Attributes
  • auth_value

    8b4992996780a35a82f2dbdc1a497f08

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2224-150-0x0000000000760000-0x0000000000788000-memory.dmp
    .exe windows x86


    Headers

    Sections