General

  • Target

    3916-153-0x0000000000340000-0x00000000003A0000-memory.dmp

  • Size

    384KB

  • MD5

    45f978ea8649c2d5ccfb98e800098655

  • SHA1

    4e67d4e3a3418e934044c0527594883a7c996b55

  • SHA256

    925d63f9d93ae9d436f3890348bc215aa49363f7c55f1f8d9c1fea34eca6a777

  • SHA512

    8cf55754bdabc4aa3b10cf119a1d66dc28563c8166fb218fae8a3ba8413995a39dc0607623d0029c500a85453d511f906f1997aa886b1cc65c0529ecd4163868

  • SSDEEP

    6144:tdmub3lTEbu5pw2hl0aFypvtphfb9NV46zGfH1dS3eFTJVwVKmh8LFRxNyJJXBBN:fB7ah2hSEypvt71MoelJVwVKmh8LFRx8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mario23_10

C2

167.235.252.160:10642

Attributes
  • auth_value

    eca57cfb5172f71dc45986763bb98942

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3916-153-0x0000000000340000-0x00000000003A0000-memory.dmp
    .exe windows x86


    Headers

    Sections