General

  • Target

    1808-154-0x00000000021C0000-0x0000000002204000-memory.dmp

  • Size

    272KB

  • MD5

    a351aa38d8c29ceff139d2dc439c750b

  • SHA1

    cbec7c079484702b96caaebdf52619fd9f0fd87a

  • SHA256

    54a80bf83a67e5e3677fcbc9ab1c3ca69b225259e7399d7ee2fe2aadf99bdf12

  • SHA512

    1c404839806f55b1d0874022c7601799fe28501b1d942fd270adbf650accc7723037ab9e2b6ec97706886be73810816d488be7e29ae9ee188d092beaedb60195

  • SSDEEP

    3072:J6j4ELN6FY9Cff3n0sk+wziR/o40DrNwAhFMnImax8EExNn2pU9f2MKTV/wi4lrO:J6jiD30sk+wzYZAhunI7x8

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mango

C2

193.233.20.28:4125

Attributes
  • auth_value

    ecf79d7f5227d998a3501c972d915d23

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1808-154-0x00000000021C0000-0x0000000002204000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections