General

  • Target

    1340570x00000000032100000.dmp

  • Size

    208KB

  • MD5

    58d8785f4bec7f31f5182e14705d395e

  • SHA1

    ea3b5cd410fa63139588c0e265d5ac9ab1a5d92d

  • SHA256

    c4894aba2b49a232e4596d4d5ebee28fd73efb0f9b357edecd9d7de4753c7051

  • SHA512

    27954d1bbf2111b2ff0c43733cec9997eab7ff8ed43f40901618c4d338b17e4eba2e14e160efe330f02fe0ffd8e2d4e993fb9307761893b290d01ab5646b02e9

  • SSDEEP

    3072:d8S4s69gQu2l1/+lEH52BIPUVQ+RwM+IB+SaDtsA4+rSzPDJ8e8h0:KS4s6Pl1/jUhtcSMtsASR

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

146.59.161.7:48080

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1340570x00000000032100000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections