General

  • Target

    98660-56-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    dc0742122c600098770471f9376ee14b

  • SHA1

    5e041c2efddc02417310213d7ec61f55b90e3920

  • SHA256

    bb4af2025a7ad72ea04c9656d46d8294768dc02870e5052a13fecf3e8e7f86b6

  • SHA512

    84d722a9f8ed218051e5ca9f73453f967a094d84a1b2e6c1f7fe97f4cf9efe3564f3971d4423d635a1c98fdf0a1d069145c8d04e937c5a5ce326de34902109df

  • SSDEEP

    1536:rhGETCdVRend+AWH/4biDFSMaoR39iCxH9RfAUOnxbObuc+GMPjOQq0wuei1+b3H:9GE0umA3MakbvAFnJaFvwOQqhtyfG

Score
10/10

Malware Config

Extracted

Family

redline

C2

62.204.41.141:24758

Attributes
  • auth_value

    037f037aa194113c151b11ac02a7206a

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 98660-56-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections