General

  • Target

    1816-92-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    99109ff27031a2d65bb18c6f7ca184c6

  • SHA1

    a6911abb31cca0142e71cde4c43f17451d4c8457

  • SHA256

    5adab06b5f9f3ec84d90fd1a583c3d68ebb052515eab3e6b3d15ea6905e94efd

  • SHA512

    034090adccb510b9840c4f69619051b42609c45ab7be9f107c87f59fa4040432afa038a1f5f610b7ae4cdd2c6c104ea97cf3fe434f8382b450f745888e2c593f

  • SSDEEP

    3072:RxqZWRaar4M3h1pKEpk8aeq8FuhTLxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0j1:DqZu1pnbbuh

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

51.89.204.181:22299

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Signatures

Files

  • 1816-92-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections