General

  • Target

    102008-719-0x00000000005B0000-0x0000000000610000-memory.dmp

  • Size

    384KB

  • MD5

    bd4d717f536605807b27adbf6d113349

  • SHA1

    0d8dcc12f1a8ed3b2ab873c51d0005d183fef4e5

  • SHA256

    06a5eda8d9a658cd604e9d29bcae2e63498711ac6c5b8707b541eeb84303c172

  • SHA512

    74aa7ecd597f723c5438a861c164f6e6a0c32870a4ed9c3d0fe63703a558d551f0e9f88f8d63aed8a0ad2fd4f847284435223288990bb8030fd5f09c88676f7d

  • SSDEEP

    6144:gdmub3lTEbu5pw2hl0aFypvtphfb9NV46zGfH1dS3eFTJVwVKmh8LFRxNyJJXBBN:MB7ah2hSEypvt71MoelJVwVKmh8LFRx8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mario23_10

C2

167.235.252.160:10642

Attributes
  • auth_value

    eca57cfb5172f71dc45986763bb98942

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 102008-719-0x00000000005B0000-0x0000000000610000-memory.dmp
    .exe windows x86


    Headers

    Sections