General

  • Target

    2044-57-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    ce1aee4fc86847ab42ffbf622c680af8

  • SHA1

    f488cdbd4a05e3cd3959e9b10575148fc777b109

  • SHA256

    b40ce6a04b64503c4a9512848a5568e88d14ea2f6ec8382d102f97c7958ade87

  • SHA512

    5b212e481aaa859170b03bd364da3e508da4ff01e506353ac1df93f2dde01c56656b9f79baefe61fb6c79fddad1082c505941ab7c6b1efefbbe5de5aad376b7e

  • SSDEEP

    3072:3YO/ZMTFzDaAN7s2Sg5BT89yyfVpDFvyRP+hCSSs1:3YMZMBzDaAq2jBT89yybgp+h

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @mr_golds)

C2

51.89.201.21:7161

Attributes
  • auth_value

    4b2de03af6b6ac513ac597c2e6c1ad51

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2044-57-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections