General

  • Target

    928-144-0x0000000000270000-0x0000000000298000-memory.dmp

  • Size

    160KB

  • MD5

    e39873016eb67cc3f0da864b14ed8544

  • SHA1

    4f0b81cc7e2eae26f9957a9b5a0ef3ec96a4cbe1

  • SHA256

    1cb6a5e90cdbe49522bb95ba756fa2edf0c392248263e7c9d8079827a17332ae

  • SHA512

    8f35d6603201ca997d29add7ec68d297969f3d14bececda2ec44371472576845e43f0b91ad548446271938e628b66b0f5de798a54034c7d99eef70ab5a2926b4

  • SSDEEP

    3072:oYO/ZMTFgcf0hnN4be5spjX+NVvDFTyFPqhJSSVb:oYMZMBgcf0T9shXIAVqh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Google2

C2

167.235.71.14:20469

Attributes
  • auth_value

    fb274d9691235ba015830da570a13578

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 928-144-0x0000000000270000-0x0000000000298000-memory.dmp
    .exe windows x86


    Headers

    Sections