General

  • Target

    1460-58-0x0000000002100000-0x0000000002144000-memory.dmp

  • Size

    272KB

  • MD5

    a66bd33f061e425688db1cb654570dc4

  • SHA1

    84b4fd69e0ace880d29442f9462a1983abfe6872

  • SHA256

    746fed8b3ef8462037bdb312b52ea4875a79d0cd651710c7b687c345fedc1c41

  • SHA512

    bfb097a9c368e3847795b9bb4f14cd4bb7dfd953b20af3a96110d29002308ffe51814fd0185d44dcbb4e5d5fce9ae2055140691be6eb9536efd3bc5e93b3d55d

  • SSDEEP

    3072:tT6jgELx6GNZCKN4dI0wKbroqlwZsmLoG3vXDCvgJo40DHw3hJPn/j2nwxNn2pUl:tT6jdJ4dI0hoqlwpLo4Y83hFn6

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1

C2

138.124.183.137:48862

Attributes
  • auth_value

    63347a605fdd4b113180332821529963

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1460-58-0x0000000002100000-0x0000000002144000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections