General

  • Target

    99888-56-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    b298310be92f537ac9eda414611da501

  • SHA1

    e8bde8f6135d00cf4c118c3cbe3f76319039df98

  • SHA256

    89d31d923c839e03be86637fe966772900c4d55f61a665ef39d3f2ceba53c788

  • SHA512

    53e829519413ce175e8b079031bc262d2e184ab547372e2182df7fc557e5c5a02a4b117a6f44c0da62b847f2abefdecf362f63871738ab3501f1696b55c1bcde

  • SSDEEP

    1536:7YGETCddRendHACu/XnZbiy7DvbZyliBfAUOvjmNbuc+G+PjiQH0wuei1Nb3d3oa:8GEcu/Al3AFvSdFTaiQHhO2a

Score
10/10

Malware Config

Extracted

Family

redline

C2

79.137.192.7:39946

Attributes
  • auth_value

    bcf025b524927f8234b27668b26936ce

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 99888-56-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections