General

  • Target

    4756-134-0x0000000000400000-0x0000000000432000-memory.dmp

  • Size

    200KB

  • MD5

    51c6958940b0186ca7afc8b06bb46b8c

  • SHA1

    69c6641080f428d76ee312c83b3d17f333b8e41a

  • SHA256

    47f7d581364996e8c1bea7f43d4dab48e637f46cb7ae8e028e87ad20fdf20b64

  • SHA512

    8c6968d5d5adb5411d9a952dd36c66656f37260c7690bab47c1dc698ee955de1a6658bc592613e59c6c028ffde3f039a97c26685352f570ab6d507eb925d6821

  • SSDEEP

    3072:HxqZWzYa5kLBVb6kq8Ikeu890hZbxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jOc:RqZRb6bHf0h

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

51.210.161.21:36108

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Signatures

Files

  • 4756-134-0x0000000000400000-0x0000000000432000-memory.dmp
    .exe windows x86


    Headers

    Sections