General

  • Target

    1184-69-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    ec80d7527b84e17531ef151ee78a40b3

  • SHA1

    500d23609c353dfbd8749bf6b6442ff610f3bfbe

  • SHA256

    a0fec9196256440f3c86120cd0f3a7cd5d8388697ebde369771ccf11ecc8e8d2

  • SHA512

    d7004c619724eb4e7ff8639e06f7dfce46a81c4db5d93bb543aacc9a1eb7400192bea564ff3f89e4a48994ed0847e16c36188b17d15df78ea9c55b7f0fb53050

  • SSDEEP

    3072:vxqZWd2a/Q9Th0N3mTIezfF7hqHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOun:ZqZ30paF7h

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

51.161.104.92:47909

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Signatures

Files

  • 1184-69-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections