General

  • Target

    732-272-0x0000000000730000-0x0000000000758000-memory.dmp

  • Size

    160KB

  • MD5

    38f71dc7461e813a69f682719ad50102

  • SHA1

    1cff10197b3828663459fa09bd68a45d63fe598d

  • SHA256

    c9ab728a2f6c8e6dfc4a188eb75cb847435ceb9c01ac2f6e6f1b2e1169368e71

  • SHA512

    2c696a87827676ec965e39f594d497a77d4e93896aef694f13c263cc621a0a5d4b3097ade01dee9b629cb260b03b386f2b6641685055c194e4d2f28fe3a0e457

  • SSDEEP

    3072:3YO/ZMTFzD64o7KzEnpoNuVzDFkyePjhGSS96r:3YMZMBzD64pInpoNeN+jhH

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

slovarik15btc

C2

78.153.144.3:2510

Attributes
  • auth_value

    bfedad55292538ad3edd07ac95ad8952

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 732-272-0x0000000000730000-0x0000000000758000-memory.dmp
    .exe windows x86


    Headers

    Sections