General

  • Target

    884-65-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    bf6ced7844d9bfc5d45eab833f218cb8

  • SHA1

    18e7b623ec15fe4e8aaf72c5b092c9822f7d5e59

  • SHA256

    3bc108ac3033db8a71c3f5e4d325318dd386882c7baf650c050e61fa877a1679

  • SHA512

    25869675fe410e3f47b7e78c54476b979a44e9be16dea9c19887ea902cf204945eb4b820df847e1258d3e64fc433c76b3f90456df3a13f29fc802fd27d78b2c8

  • SSDEEP

    3072:yYO/ZMTF9ZGIn7+hXzVuDQLJ6VMDFGjRXFh/SS:yYMZMB9ZGIahVuQvyBFh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

me

C2

92.119.112.239:28769

Attributes
  • auth_value

    0b41ed1bdf04c7505d47398771081370

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 884-65-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections