General

  • Target

    1620560x00000000034900000.dmp

  • Size

    208KB

  • MD5

    39b0bf45b92afa9dcfb94ca3ee77452c

  • SHA1

    d99b62e0113160f3e0de00711dca0d696f807a68

  • SHA256

    544408cd41889d50552cde77d05319d0cb52f87b6caac63f31f20f2fbee6f545

  • SHA512

    be10ccc4e08234190b3821c83d1a0e1980788dc338dc4464e4ed289db0885e0b683802fcbecfa9be1fbfa01a8f827ec2658b0d54c6966efd8a071c88c41f67a0

  • SSDEEP

    3072:d8S4s69gQu2l1/+lEH52BIPUVQ+RwM+IB+SaDtsA4+rSzPDJ8e8h0:KS4s6Pl1/jUhtcSMtsASR

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

146.59.161.7:48080

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1620560x00000000034900000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections