General

  • Target

    3348-898-0x00000000045D0000-0x00000000045F8000-memory.dmp

  • Size

    160KB

  • MD5

    a551b025905cb0c841e595530ae78911

  • SHA1

    29f29a333147f91a5739e45a86e71242c80f17f6

  • SHA256

    9093581852604891b95b7593f232e4550970cf577ba50a569915fc494444aa01

  • SHA512

    75e502dbda2e0b220d9e4e80da28410ea2e787c4a2288fbf272c4347be865abf4ad65f517a5a2829074a446d09de353383b0f44789a0899e3e972bc5ac4e672f

  • SSDEEP

    3072:EYO/ZMTF3XuIQj/98KkQy9yvT/VGDFTyRXIhjSSfP:EYMZMB3XuIQyKkQy9y4cBIh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

31.10

C2

194.87.218.5:9630

Attributes
  • auth_value

    6223ceba7350b5fdfd29a51c01ad5fdb

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3348-898-0x00000000045D0000-0x00000000045F8000-memory.dmp
    .exe windows x86


    Headers

    Sections