General

  • Target

    102136-1602-0x0000000000550000-0x0000000000578000-memory.dmp

  • Size

    160KB

  • MD5

    b27cfd1e9f80ee6ea41d5e4338093f68

  • SHA1

    1a671099bc85f7f7aeaf01e93ea8eae1b4e3e0ac

  • SHA256

    551e0c6a42df31b2be73c305ccea03b182597766449f4f31418582be981aa66e

  • SHA512

    9134cfa9d21216dc419f4855039ed6a94c491080356ebebf4016e3bdda26176045179f9c77c27abfb88afca65ae3362c2260e8c7c0ccf48e847448d0686a0764

  • SSDEEP

    3072:xYO/ZMTFzD64o7KzEnpoNuVzDFkyePjhGSST6r:xYMZMBzD64pInpoNeN+jhd

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

slovarik15btc

C2

78.153.144.3:2510

Attributes
  • auth_value

    bfedad55292538ad3edd07ac95ad8952

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 102136-1602-0x0000000000550000-0x0000000000578000-memory.dmp
    .exe windows x86


    Headers

    Sections