General

  • Target

    940-188-0x0000000005300000-0x0000000005328000-memory.dmp

  • Size

    160KB

  • MD5

    65937f9980a3b15df841e661c3ca852c

  • SHA1

    06a2dd79e94fa2b674955aa9bdd42d610ae53369

  • SHA256

    ba1c433d1a2ae60baf2c6f8eb0d0533125c035629c2697c19dcd2689615f5ae8

  • SHA512

    97c2d49f63ee7da2c81dc77a37f80b7c7a3e3a9089e8cb0c78feafb7a928655b8f90356b4f705e3bc9114d6a8fe85f5104556cee280c0b2a3980bb2e94ad1965

  • SSDEEP

    3072:bYO/ZMTFzD64o7KzEnpoNuVzDFkyePjhGSSt6r:bYMZMBzD64pInpoNeN+jhP

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

slovarik15btc

C2

78.153.144.3:2510

Attributes
  • auth_value

    bfedad55292538ad3edd07ac95ad8952

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 940-188-0x0000000005300000-0x0000000005328000-memory.dmp
    .exe windows x86


    Headers

    Sections