General

  • Target

    576-58-0x00000000000D0000-0x00000000000EE000-memory.dmp

  • Size

    120KB

  • MD5

    f42683ab028ebeb9af089f8d235d63f4

  • SHA1

    7d092295dcb00191e4b2c07d75ec75f581b0299b

  • SHA256

    4e6cca7b86a520bc33a61befbc9b5d96d1b14005f924fb2678e2022fbd7cfec8

  • SHA512

    cfc165fc4180a5a8e164fe79f358bd8271f4a5907770b6b1694b1dcde141f437393bcf6366b468f818c9f7137b4d1bd6a4b2be2d37850ce6451dd0314e61d1cc

  • SSDEEP

    1536:Nqs4iqeHlbG6jejoigIH43Ywzi0Zb78ivombfexv0ujXyyed2v3teulgS6p:7/pVYH+zi0ZbYe1g0ujyzdD

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

cheat

C2

stanuka12.duckdns.org:23613

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 576-58-0x00000000000D0000-0x00000000000EE000-memory.dmp
    .exe windows x86


    Headers

    Sections