General

  • Target

    11768-288-0x0000000000170000-0x0000000000198000-memory.dmp

  • Size

    160KB

  • MD5

    7747523934c303ea6a0bdf5eb0b8ed4a

  • SHA1

    cc9a4346c365367f116f64f2641f57f0df4617ae

  • SHA256

    a215ec5c47483aea86cc79a05e280c9e315ce519691df5f9f5f49cbf9405cd9d

  • SHA512

    7b94aa464197bf0432d1a4e57f4f15bb0c180e2e3d400fe517cc0a19e6cdf38ce32d8238a9efb310fad524c687932da023a27a8bcf49a0a8ce5542c0e121ea6f

  • SSDEEP

    3072:4YO/ZMTFgcf0hnN4be5spjX+NVvDFTyFPqhJSSFb:4YMZMBgcf0T9shXIAVqh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Google2

C2

167.235.71.14:20469

Attributes
  • auth_value

    fb274d9691235ba015830da570a13578

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 11768-288-0x0000000000170000-0x0000000000198000-memory.dmp
    .exe windows x86


    Headers

    Sections