General

  • Target

    2720-141-0x0000000000820000-0x0000000000880000-memory.dmp

  • Size

    384KB

  • MD5

    8cc4b02a738589247a11dd9e2593612d

  • SHA1

    6cc02f823ea72f5efd3f27fc6637de4978ed0713

  • SHA256

    2955424a609abb7d9ec17ec6d2b2f30ff4ea94cac0491ed37e77d636ee38f9fc

  • SHA512

    3ca21a9a3ba380f3e4908dcf5fbb1876c95596cc34aa26b848ef6e197f251edad58f3b633c9a996409c91774ab45807d1065fc46e0bd24887a142c62afb02112

  • SSDEEP

    6144:Ldmub3lTEbu5pw2hl0aFypvtphfb9NV46zGfH1dS3eFTJVwVKmh8LFRxNyJJXBBN:5B7ah2hSEypvt71MoelJVwVKmh8LFRx8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mario23_10

C2

167.235.252.160:10642

Attributes
  • auth_value

    eca57cfb5172f71dc45986763bb98942

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2720-141-0x0000000000820000-0x0000000000880000-memory.dmp
    .exe windows x86


    Headers

    Sections