General

  • Target

    1896-56-0x0000000004A00000-0x0000000004A74000-memory.dmp

  • Size

    464KB

  • MD5

    4aca611bfd19233f7241a5cbc6755048

  • SHA1

    2cd4ef109609532c35c26f01df051690f0a7d8ef

  • SHA256

    b8b08dfe56f68b0ef2cb220f8ec7fe0b82f4ddc31f54530ec4ffe9dfd7fed8d8

  • SHA512

    997c9ca6563d313e00b6cdffb971e9f8ef70700d181931c26ea52b2d27b5d6fcbc2cc397466a044defa27b063f35e1c1809d8294390e2ce84a41fdd57c67b794

  • SSDEEP

    12288:odFlCaKPVkBi0HZPXmuFPJPqyfo78MX7GD:XaKPVBX7GD

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

A

C2

23.226.77.22:45009

Attributes
  • auth_value

    680c0a460e3b0eba5865af89acc4e052

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1896-56-0x0000000004A00000-0x0000000004A74000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections