General

  • Target

    1100-63-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    edd07b5ddd0189a4b80ca7ba7b531c1d

  • SHA1

    1c259ad90017ddf5dafec623b13f7df8db87d8c6

  • SHA256

    438911acc6899a4d97a2ed58f882646394d21d23385da581c39aefc616e0826a

  • SHA512

    7dd83f1e4e6cc5c6ec4afc244da2b19653dba8da2d100d849381470fa92b2d62f46e3708bdce31d3fc6a4f83656ba3c665b793a308acac0ef30af5ed2751da98

  • SSDEEP

    3072:yYO/ZMTFUNpswLMxM3AWUne+VgDFlyRPEhASS:yYMZMBUNpsbq3AWMe1apEh

Malware Config

Extracted

Family

redline

Botnet

Crypt_Mastif_V1

C2

194.36.177.60:81

Attributes
  • auth_value

    140a3d1ac14114893f898a1e7e4ba24f

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1100-63-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections