General

  • Target

    2740-134-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    1ae0b396384011601e0f1c0357d104b2

  • SHA1

    b77b7421f6f870aad7f5e2d8bf196aa1b5abdafb

  • SHA256

    d57b6f39aa580bc6acf052ef17afce5578405ad7100896e1b717ea728c2f8f3c

  • SHA512

    357ec9ad67c4b0edf3ecf32c2416cccabcb713c4923b767a3b31c258077274db89a6a3b491b9b1438670ec842d7f7e1211b74ddb42c727a52aef4b82e2bd0061

  • SSDEEP

    3072:yYO/ZMTFUNpswLMxM3AWUne+VgDFlyRPEhASSgq:yYMZMBUNpsbq3AWMe1apEh

Malware Config

Extracted

Family

redline

Botnet

Crypt_Mastif_V1

C2

194.36.177.60:81

Attributes
  • auth_value

    140a3d1ac14114893f898a1e7e4ba24f

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2740-134-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections