General

  • Target

    1948-85-0x0000000000100000-0x0000000000132000-memory.dmp

  • Size

    200KB

  • MD5

    bd5960a91ded01c8db90ac32d3a1e969

  • SHA1

    5baad8c571e31d67e60c610a7fc6b0adc6593888

  • SHA256

    d4580e4ca551ceaeb3d840ae23aaf6b7c1b945f11b34419000cc0fec30a9557b

  • SHA512

    b96f5fe563bb21ad26c5b655d68e44d24895568edf5dad8f874d148749de32f3eb1742e2781464d3975391e3ec537b55ccc4ce5977b3587919db9539ad0ac644

  • SSDEEP

    3072:MxqZWhiaXEatPBngNke/59DhHuxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOuwI:iqZkBnwLDh

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

51.210.161.21:36108

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

Files

  • 1948-85-0x0000000000100000-0x0000000000132000-memory.dmp
    .exe windows x86


    Headers

    Sections