General

  • Target

    3700-237-0x0000000000620000-0x0000000000648000-memory.dmp

  • Size

    160KB

  • MD5

    e7d8028c001302f84aeac0c65e15c533

  • SHA1

    489920fd4c5b0e9f9e59d6c26511c540d08ff4f0

  • SHA256

    3107c0f94d4eed178b2cd0dc4beb20c13fd5f56679b898938b796f8a01876081

  • SHA512

    dbcfb2dfc1df10d8fee925073c0830d224a864fb47d0bf433d9b617c83b7f31450ba863bcf3ad41d8376f8fb3097c804d8b4d30a42b446ab57e7254c5152ccc7

  • SSDEEP

    3072:XYO/ZMTF5tgoYzdxdspuXbpVRDFTyBPShmSSOX:XYMZMB5tgom3sEX5Y5Sh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nam7

C2

103.89.90.61:34589

Attributes
  • auth_value

    533c8fbdab4382453812c73ea2cee5b8

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3700-237-0x0000000000620000-0x0000000000648000-memory.dmp
    .exe windows x86


    Headers

    Sections