General

  • Target

    892-157-0x0000000002D50000-0x0000000002D94000-memory.dmp

  • Size

    272KB

  • MD5

    c6e5836c60790ce8a9b9747e60b6ea7e

  • SHA1

    51e6b241f77a6e56bde67f6f99dd378e25cb9646

  • SHA256

    424fee1f52734ef49751778eda04ce9ab3bf68607bb73d2ebedde63308183f06

  • SHA512

    42cd3e24be1e76681a303163f8626e8320db2a78cbad480e953aa9ccff82d4d2ce3b971791e06451e0dd74a3f62cc43a1a93c9839b15521f2b9f3633f4214529

  • SSDEEP

    3072:96jYELp6VFxCCWosai9QFwNsmLo0gacrilo40OTkQhOEnISw+dvoxNn2pU9f2MKL:96j+GosvqFwtLo0yr3QhZnI

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

gena

C2

193.233.20.30:4125

Attributes
  • auth_value

    93c20961cb6b06b2d5781c212db6201e

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 892-157-0x0000000002D50000-0x0000000002D94000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections