General

  • Target

    1816-223-0x0000000002290000-0x00000000022D4000-memory.dmp

  • Size

    272KB

  • MD5

    cf7626e1d2c798a4c6251009d9493ea6

  • SHA1

    48d3c28fc6bde09a75a749713aa55b809521e949

  • SHA256

    e91d5311a6da740c930ee194317d10a4d1e9957a3a4e5b12f2f29a82fb9d5395

  • SHA512

    e55f2df7c6aca3d2a509e4c3585c3fd6343c2520acc31390c514eb8ee00a617afc03aef3a1ebb1a34f4baded092a5d13c91dc28d9c7986a2b3ff37fe34c789c1

  • SSDEEP

    3072:J6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrO:J6jiD30sk+wzYZAhunI7x8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1816-223-0x0000000002290000-0x00000000022D4000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections