General

  • Target

    95936-56-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    8ba3a3c99d8280b2aa3f0000a0281a94

  • SHA1

    4862eb629e9c7b3e6bc69c38a46c57514ee284f7

  • SHA256

    a465536cec362e24be56bf878d1942af87192192fd7d35b7f21c080285456c98

  • SHA512

    a3b668fa5612e68bb17fc1f93019e5f7998f50d91c7367cf77c91ba7bee2a8db442e14ad30f2eb07eb00072c621d60cdb7994d9c6ab08981ad2aca14c51ffc66

  • SSDEEP

    3072:jYO/ZMTFXv+eHdDVYvV23fj8KLfWF3yR10hJSSM6c:jYMZMBXvtHH8VQX70h7

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

711

C2

194.110.203.100:32796

Attributes
  • auth_value

    24e3340d853c89cad1e25194559ee778

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 95936-56-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections