General

  • Target

    99876-56-0x0000000000080000-0x00000000000E0000-memory.dmp

  • Size

    384KB

  • MD5

    0fff7495a6fd35fba58b7949f2b38cdc

  • SHA1

    ad4cd1f7f770f8d0dae9c5739aeb6185b41aab5d

  • SHA256

    d81c87537c0ed1a19a8579d37afb38a213c63278dbc21e6de2ad2c0031795c64

  • SHA512

    e098794e9983ce4e8757f3d29dd0f2c55dcf35f8947454c3b43ad03bb1b505a8118327842fd651403e842a9b6edb256662ff8202bb4be0fe0a4eb67768b1c3df

  • SSDEEP

    6144:4D6XIrH0wbD1BeicqfcpBdtfS6g5Ylo5clJvjE1lTe5df0F3WOgwv+6B9HpW/MdC:4X7b+nqfIdtqpmlo5clJvjE1lTe5df06

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mon

C2

94.131.106.170:47476

Attributes
  • auth_value

    6e1f70fda95afb9ccc26e33ac8e6fda9

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 99876-56-0x0000000000080000-0x00000000000E0000-memory.dmp
    .exe windows x86


    Headers

    Sections