General

  • Target

    584-77-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    85c2cef348d9dcbfaa379811852b6f42

  • SHA1

    e05c5bd27a3287f74b1e64ea1aa2419e395729c5

  • SHA256

    769d9e073023a50e6f53b1114489619c425f1d5060306a97dbd226d38f95ef3b

  • SHA512

    457ac25f2b5d3dc7d8a33a55261d2ab94892183c67de11ed6fd286136bcab1fc441915deaef072a4c2ffb6815c98699c0019ab5635666deb7f0506ea7bc05fa8

  • SSDEEP

    3072:OYO/ZMTF77rwICrYVWoeNdQOvizVBzDFjiRX6hXSS83:OYMZMB770IlUdQO67zUB6h

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Morn

C2

80.66.87.20:80

Attributes
  • auth_value

    98b8a59d3016c72d785854c61b951f1a

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 584-77-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections