General

  • Target

    71356-80-0x0000000000080000-0x00000000000A0000-memory.dmp

  • Size

    128KB

  • MD5

    3cac359320880ee1474924f165791a96

  • SHA1

    8f7109e27005c422d308767cf2dd03ce186b0b26

  • SHA256

    00462eb1d1e9198ffc872ede9b2c07c4cffba0e54d840f4af8d37e4f3718d127

  • SHA512

    867f74552044e39136188fd818c6ff60c8e7fec08d46e2b437d48cb9b8ea59f8eaf43cd0bac2d0de1fde15fc91a0d0269a2c42bdbad94b9792fd450d70a63e48

  • SSDEEP

    3072:BcvFBgCYCpieID9L2eIrbzVcQcUMMODchw4EASNk:BcvOf9IrbB1cRchw4jS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@youlie_lzt

C2

litrazalilibe.xyz:81

Attributes
  • auth_value

    4229399b49b4c8e5f0d0fcabd3052956

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 71356-80-0x0000000000080000-0x00000000000A0000-memory.dmp
    .exe windows x86


    Headers

    Sections