General

  • Target

    2292-243-0x0000000000400000-0x000000000041E000-memory.dmp

  • Size

    120KB

  • MD5

    7163e154569af6cc7fdc5be96e3bd9b1

  • SHA1

    c3782c13f1bfc7a77ada56794d78efcd2b2ac806

  • SHA256

    a3f57e8506aa60bb607c856fc55f22be14e01ff267abbc76ba802cc4ae92c2f1

  • SHA512

    226598e71fb3e9b53a356a92c39b99c00e1bb1ff059b33b35789be468480a189d05881ca31f9a2db3f09c3c797d8a786e677ede753d1f94dc7f0e1e69512a729

  • SSDEEP

    3072:xXg6tEc/oNDwm9eBRN2zRM8OBkkfZr26:xU99aK

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

ChrisNEW

C2

194.104.136.5:46013

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2292-243-0x0000000000400000-0x000000000041E000-memory.dmp
    .exe windows x86


    Headers

    Sections