General

  • Target

    2780-243-0x00000000007C0000-0x00000000007E8000-memory.dmp

  • Size

    160KB

  • MD5

    cfac3a57f74c7367c2b6a0e25e2b4cde

  • SHA1

    35e77096f85618c8f721449419d71c1057e8441a

  • SHA256

    6bcf46245e62f595e34610ac172f4ecfe2601d24c20f82d044f705b2a1e60d97

  • SHA512

    aa18ff6c994717add06bdb8bc16f77b78e221b2fb59c1e327885b8b082b95709c234a653d718726548295b587bfc0dc91690bf7a333e5ef0a08b98061af33f51

  • SSDEEP

    3072:jYO/ZMTFNR4vIwr0TEeDO+OPQXVtcDFkRRXDh6SS4o:jYMZMBNR4vIrlO+OIYCBDh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

buildnewdomain

C2

hrabrlonian.xyz:81

Attributes
  • auth_value

    90794203993789d187f29ff50d00de2e

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2780-243-0x00000000007C0000-0x00000000007E8000-memory.dmp
    .exe windows x86


    Headers

    Sections