General

  • Target

    2976-133-0x0000000000430000-0x0000000000458000-memory.dmp

  • Size

    160KB

  • MD5

    fc42c71f498446bf9f4fa5d956cf024e

  • SHA1

    aa2967e33a1a78a9a5025d0467c724c18011cfa6

  • SHA256

    14976299c6c07c796624bedc12ccbb225d2747917eef52267f98005def18cbb2

  • SHA512

    3f666d9ad37cae6fe82ad1a1155608b5677ab16e9366afaa5ea65c618dec6588615da65bebe9a1221ee2d4069fc44f64713912f1c178dfceecdfdfe1b854ab17

  • SSDEEP

    3072:OYO/ZMTFXv+eHdDVYvV23fj8KLfWF3yR10hJSS16c:OYMZMBXvtHH8VQX70hk

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

711

C2

194.110.203.100:32796

Attributes
  • auth_value

    24e3340d853c89cad1e25194559ee778

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 2976-133-0x0000000000430000-0x0000000000458000-memory.dmp
    .exe windows x86


    Headers

    Sections