General

  • Target

    3376-135-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    232d185863c7c76f864867b67d66e49a

  • SHA1

    62e8979b297ba5c09cc9d9c0d33e646aa4c3841b

  • SHA256

    441cd93592f4ca3a0b99099f4262143dbf4a588b5cdb9ecb34fc37d3eb1b045d

  • SHA512

    1f6a4359b30ef184be5baa0d79d2fd79bfa4ab08f3f9cecdf20b2fc25e2c3f27e5365e781070e490affbe82d1f0189c6668eee6473cb64368916d862243b5797

  • SSDEEP

    3072:7YO/ZMTFzr+sIjLHyukVztAsbWFjy5XbhRSSwl:7YMZMBzr3I/g1bx5bh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Install

C2

manddarinn.art:81

Attributes
  • auth_value

    f9affed97251c08e7a096257ba9edfb2

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 3376-135-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections