General

  • Target

    1536-57-0x0000000000080000-0x00000000000A8000-memory.dmp

  • Size

    160KB

  • MD5

    6899e1b154fbe15a73ab0c329fcc7967

  • SHA1

    4b049e3170784e6094ef45dc2d4f37e7edf2b4d5

  • SHA256

    4e83bc095ca97d6c53c7261896beeb1a6bb750f0cec9e2dc2999b811a961ac67

  • SHA512

    6f0d00170a7bd4b0fb1f1586bda40fcd6257bc9a8ce01e336b4e278bd9facf773e635158a3cd196ac61e7e4043a1ee156eec9eaf7ac1c60dc510c1f88a4a4727

  • SSDEEP

    3072:2YO/ZMTFvE+rnRr60DOB74LItgpWFxsRPZhhSSUb:2YMZMBvEcnYAW8BpZh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

easy11211

C2

chardhesha.xyz:81

jalocliche.xyz:81

Attributes
  • auth_value

    980d12032eaaadd1ef7186440759c9a5

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1536-57-0x0000000000080000-0x00000000000A8000-memory.dmp
    .exe windows x86


    Headers

    Sections