General

  • Target

    2228-480-0x00000000001C0000-0x00000000001E8000-memory.dmp

  • Size

    160KB

  • MD5

    eff28f3d0f34c9fee00f9b74c727b5b7

  • SHA1

    4b37336950e4625ad20a1e664bb2280fa509ac79

  • SHA256

    792772b0ee82d2cdab3548c4b2c558d7b334a6be46707ca6ee0d77be84e6863e

  • SHA512

    7eefcac240826e643a14887c73129c3b82e584147cf4f620939e503257ce5d6f1d1e630158e770ae1a9990f5c721a5da55c2fb3b9d5302b29890305bcd5cf03c

  • SSDEEP

    3072:hYO/ZMTFgcf0hnN4be5spjX+NVvDFTyFPqhJSSEb:hYMZMBgcf0T9shXIAVqh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Google2

C2

167.235.71.14:20469

Attributes
  • auth_value

    fb274d9691235ba015830da570a13578

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2228-480-0x00000000001C0000-0x00000000001E8000-memory.dmp
    .exe windows x86


    Headers

    Sections