General

  • Target

    4036-143-0x0000000000590000-0x00000000005F0000-memory.dmp

  • Size

    384KB

  • MD5

    2edf49243e04a4b914febc6516570c81

  • SHA1

    2b756475f59e730a636823802e07c2bbd415c5e0

  • SHA256

    fb06aa8dc473afbc1329d26670c9586609da91a0545545c2d504d4753b50ce66

  • SHA512

    117ce69ef6203f6ffcfd198f81ea9ecc7a987100536512afaa2e725837455f9000d5c6e9d9bb82185c0520f3b47bfdabdb64165a86f2c1781518c04ab6eb29c1

  • SSDEEP

    6144:udmub3lTEbu5pw2hl0aFypvtphfb9NV46zGfH1dS3eFTJVwVKmh8LFRxNyJJXBBN:eB7ah2hSEypvt71MoelJVwVKmh8LFRx8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mario23_10

C2

167.235.252.160:10642

Attributes
  • auth_value

    eca57cfb5172f71dc45986763bb98942

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 4036-143-0x0000000000590000-0x00000000005F0000-memory.dmp
    .exe windows x86


    Headers

    Sections