General

  • Target

    3160-217-0x0000000000350000-0x0000000000378000-memory.dmp

  • Size

    160KB

  • MD5

    7de702920f14ba8918ef0f0edddcb8a3

  • SHA1

    3ce3449cd0c0fc6a7d618689774a351619b38671

  • SHA256

    0792c9448759e3fd65b13e52e0f369f5802d2ad1cef3ff9ecf4dcd6d48f971ae

  • SHA512

    1633d36eedf72432f1475afcb7b8fa4742e0be587eed1c8a8e0c2fa5c27ec7d5c75968163e158ccf502280edb4c351b5c3f75c954fc139ccede013bbc3fc0fb6

  • SSDEEP

    3072:gYO/ZMTF3XuIQj/98KkQy9yvT/VGDFTyRXIhjSSbP:gYMZMB3XuIQyKkQy9y4cBIh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

31.10

C2

194.87.218.5:9630

Attributes
  • auth_value

    6223ceba7350b5fdfd29a51c01ad5fdb

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3160-217-0x0000000000350000-0x0000000000378000-memory.dmp
    .exe windows x86


    Headers

    Sections