General

  • Target

    1764-144-0x0000000000510000-0x0000000000538000-memory.dmp

  • Size

    160KB

  • MD5

    2fc51b703d6510c89bde443b46b8f1ea

  • SHA1

    e2465c1d848e8a6888b8b9a4290087349e9eef77

  • SHA256

    33fe60157caea798234d46602ca405bc24a6c260534b1b22b6105f4d15b14b41

  • SHA512

    6b203ccfd6933ea6c9f235da1b5d3d937efe64946410856782b54f84ded987411e1d3e4dec1def533ff35e82d41873b637d118684f30524340f1532f12121f18

  • SSDEEP

    3072:mYO/ZMTF5tgoYzdxdspuXbpVRDFTyBPShmSSjX:mYMZMB5tgom3sEX5Y5Sh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

nam7

C2

103.89.90.61:34589

Attributes
  • auth_value

    533c8fbdab4382453812c73ea2cee5b8

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1764-144-0x0000000000510000-0x0000000000538000-memory.dmp
    .exe windows x86


    Headers

    Sections