General

  • Target

    620-140-0x0000000001110000-0x0000000001170000-memory.dmp

  • Size

    384KB

  • MD5

    b442c12307d78aa88d2b384eaeeb235a

  • SHA1

    17949de0e7bbb38904cbe57a4157e2289e617d57

  • SHA256

    90956b365e673b50b2ddb80e2bb0f36dbc13a190d7726893c45c2ccc3e1d8c78

  • SHA512

    bd7a80e88215dbd376b35f5653dce2ffb60804f4b4d94ae79ad3ba17b36bcf8dce15a208c87239f976624ad4009f07561eb15fbb62decd965c0595748a35cb1e

  • SSDEEP

    6144:jdmub3lTEbu5pw2hl0aFypvtphfb9NV46zGfH1dS3eFTJVwVKmh8LFRxNyJJXBBN:xB7ah2hSEypvt71MoelJVwVKmh8LFRx8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mario23_10

C2

167.235.252.160:10642

Attributes
  • auth_value

    eca57cfb5172f71dc45986763bb98942

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 620-140-0x0000000001110000-0x0000000001170000-memory.dmp
    .exe windows x86


    Headers

    Sections