General

  • Target

    1516-155-0x0000000004690000-0x00000000046D4000-memory.dmp

  • Size

    272KB

  • MD5

    56376529f92c6d72100ebc8809e3cb50

  • SHA1

    c2796133fac21a7c11c5e044211b7f81a3e8fa1f

  • SHA256

    379f617a48fca09ec9915ad92ed33ec9eb0aa86fb564b6dca2a780e86a616817

  • SHA512

    b97ba814a4c7edeabdc761c006e2ffdaa5299c150d60ea1325180c7013c18345940b4a257d86236eea1f9d6c1fa8fb33fa711eb6dd0ad13d5fe8dca8072a95cb

  • SSDEEP

    3072:96jYELp6VFxCCWosai9QFwNsmLo0gacrilo40OTkQhOEnISw+dvoxNn2pU9f2MKy:96j+GosvqFwtLo0yr3QhZnISDqR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1516-155-0x0000000004690000-0x00000000046D4000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections