General

  • Target

    1100-58-0x0000000002380000-0x00000000023C4000-memory.dmp

  • Size

    272KB

  • MD5

    d6cebd2334c1352536c17b0f369baeff

  • SHA1

    29fc6f685f75299c18f718e76bf1138dba3b4995

  • SHA256

    2621233e42ff29691482f26f6a0495008fd24a27b9e7485090757a179f206470

  • SHA512

    2e13aadb50caf1d6795dc8c9b58c5999738b8bcd8d7f7dc9a60843f794a13443e64641321527f964be87fc24a9237cae1839430f1fb029ee41c572438cf7cab9

  • SSDEEP

    3072:q6jIELh610pCJpsSYK2TwPsmLoEiO4QDCPgro40JPTfhXXnToUwitzpeoug0xNn1:q6j2VpsSYxTwHLoEis4PfhHnToxitwb

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

sport

C2

31.41.244.98:4063

Attributes
  • auth_value

    82cce55eeb56b322651e98032c09d225

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1100-58-0x0000000002380000-0x00000000023C4000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections