General

  • Target

    2228-267-0x0000000000590000-0x00000000005B8000-memory.dmp

  • Size

    160KB

  • MD5

    c3e9f5b2d3d18dcffd9397077caf9cad

  • SHA1

    aa514f7f7f7601dfc52649cd2aa8663e3470793e

  • SHA256

    63bdbea03ed18d59989f7a51db86b92a14ad4baf30bd4ab08085915f01584ef1

  • SHA512

    8f5389c8a10c9896a68dc2c8aa700ea04fbbf97562ac369cf59115a1b7f649a11f6c63fe51e2b3b0e236a87b21436a20cd6aabcc660ebdf6f787d9a8c9867b4f

  • SSDEEP

    3072:QYO/ZMTFNR4vIwr0TEeDO+OPQXVtcDFkRRXDh6SSPo:QYMZMBNR4vIrlO+OIYCBDh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

buildnewdomain

C2

hrabrlonian.xyz:81

Attributes
  • auth_value

    90794203993789d187f29ff50d00de2e

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2228-267-0x0000000000590000-0x00000000005B8000-memory.dmp
    .exe windows x86


    Headers

    Sections