General

  • Target

    3040-141-0x0000000000F00000-0x0000000000F28000-memory.dmp

  • Size

    160KB

  • MD5

    a4d7f88f90ca25cf45f4ff6fd0e2d4f0

  • SHA1

    320d22cfcd7c13bb9ba69931108603aea917c76e

  • SHA256

    08677e6956be07d8782379f5902e780942787d2bcf84f4db3c9584dde86c5d3a

  • SHA512

    876e004d0b50d04ea13a6d85b4bb7bb48aead4678f518c969b67d3f547046b3c290fe5a6ab64513de22d2ff1e72e4cdc7a711b5131101ffcdc6b1064f63b7c04

  • SSDEEP

    1536:AiGETCd9RendMACB/3XZ7J/FnP3U1fDPG2fAUODxUibuc+uMPjioo0wuei1eb3dD:fGE8ucxzFM1jlAFD22FjwioohJafM

Score
10/10

Malware Config

Extracted

Family

redline

C2

185.215.113.69:15544

Attributes
  • auth_value

    1372cd9fae57c6645ea8737ff631eb3c

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3040-141-0x0000000000F00000-0x0000000000F28000-memory.dmp
    .exe windows x86


    Headers

    Sections