General

  • Target

    1996-57-0x0000000000320000-0x0000000000348000-memory.dmp

  • Size

    160KB

  • MD5

    75152fda7736c612ac13944558595a54

  • SHA1

    702dc31a6b4258c031e4ee1d909d139ae4cfe3a6

  • SHA256

    d6d6e761d7c4c790554303ff7422112d01b39c416c49e1e2966bb922f4906cdf

  • SHA512

    c2f00cc3da7b61ae08a5c5b5f6f7a8301b3b87a35f8a222b1552fe8b0b9d74162c1292d269d7074a750a13d0f4f8591d92b92df0750021a3995ec0f4c4abf773

  • SSDEEP

    3072:1YO/ZMTFXv+eHdDVYvV23fj8KLfWF3yR10hJSSq6c:1YMZMBXvtHH8VQX70ht

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

711

C2

194.110.203.100:32796

Attributes
  • auth_value

    24e3340d853c89cad1e25194559ee778

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1996-57-0x0000000000320000-0x0000000000348000-memory.dmp
    .exe windows x86


    Headers

    Sections