General

  • Target

    2128-133-0x00000000001A0000-0x00000000001C8000-memory.dmp

  • Size

    160KB

  • MD5

    e288dd1959571b098ae2dafda92207f0

  • SHA1

    9878c79100577ae5a0c20730156b5a3b4207591f

  • SHA256

    8b625e8d6ee716c09d86ebf0bbf265b0a98b529c2a247fc51876fe556f6470d6

  • SHA512

    7f225346b9e864e9a140fe39c9c9933fba084b26f5a327ac25079836767816d22e6a85de86c67bf7e437ccb4a5921e0cc38e238e13d794f156ed0eb3461368c7

  • SSDEEP

    3072:HYO/ZMTFtJjcZ7GFn/gQeJGV4HDFPyRXehsSSmz:HYMZMBtJjcUxoQqQBeh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1310

C2

79.137.192.57:48771

Attributes
  • auth_value

    feb5f5c29913f32658637e553762a40e

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2128-133-0x00000000001A0000-0x00000000001C8000-memory.dmp
    .exe windows x86


    Headers

    Sections