General

  • Target

    1756560x00000000034600000.dmp

  • Size

    208KB

  • MD5

    e378a10b5f64c791f41a1bcb7e167085

  • SHA1

    9f9aab5bd79c181ffa79fa6fbd7822c631ccf370

  • SHA256

    5c4464a918aaf3f4e4dfe2998cc3106f64291e3345be8bf9f1213e3fbbd78a3d

  • SHA512

    7217aed56e5ee2b4c71428ec52bd8f925493d04e0231e72cf13862ecf3ee5ed09a86b6a35828d1e0794669512f9f79612bd3e78a96293a0ab4a34fb9d3d3e248

  • SSDEEP

    3072:d8S4s69gQu2l1/+lEH52BIPUVQ+RwM+IB+SaDtsA4+rSzPDJ8e8h0:KS4s6Pl1/jUhtcSMtsASR

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

146.59.161.7:48080

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1756560x00000000034600000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections