General

  • Target

    98652-56-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    0e3bd9e52651039086ca352640f73db5

  • SHA1

    7bdb3d179771382d83268b4ab7e29f3fcfdda567

  • SHA256

    288c925b4fe40a4d5b4d420358d3a5b79af4189548059f69b97d0561416439fe

  • SHA512

    5b2b4c09c5541dd687ea0ddbbf3811a3bbb04cfb195fe257c108c967de1b6fe6851a0b3a44dd07ee12c367ed5d587dd5cbf0cbb022e96b1a078cc2db8a1d7f57

  • SSDEEP

    1536:qcGETCdVRendDACB/fMAZDBLZMBzgLhgoNf7JfAUOFfbWbbuc+EGPji440wuei17:vGE0ubJMSLy+1BAFJCHF3Si44hAmS

Score
10/10

Malware Config

Extracted

Family

redline

C2

185.148.39.219:4192

Attributes
  • auth_value

    38b0e004a5d2c692f1f658f3eaa6d555

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 98652-56-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections