General

  • Target

    3004-140-0x0000000000390000-0x00000000003B8000-memory.dmp

  • Size

    160KB

  • MD5

    705c3cb79156b3c9aa69f82e30d4fd1b

  • SHA1

    b3635c369b2c442f8792a0e9a6b1db867ccbd625

  • SHA256

    f35ee6cc9e64644502d1aeccf37228313e86ca5c5c9429d12dc77f4fa2304b08

  • SHA512

    238c2a6403f505dca4a9ef0b2341f8cc24547a2000bd7512583e7562884c5a4ca903ac6acc11264e172e186cc494a2fc228ec21162195a1ca5b678336065042f

  • SSDEEP

    3072:lYO/ZMTFzD64o7KzEnpoNuVzDFkyePjhGSSf6r:lYMZMBzD64pInpoNeN+jhR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

slovarik15btc

C2

78.153.144.3:2510

Attributes
  • auth_value

    bfedad55292538ad3edd07ac95ad8952

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3004-140-0x0000000000390000-0x00000000003B8000-memory.dmp
    .exe windows x86


    Headers

    Sections