General

  • Target

    2344580x0000000001C400000.dmp

  • Size

    208KB

  • MD5

    8fb1a0aee6d13b0545706bece6f6bef4

  • SHA1

    014cb838b265b4745b4f8f453d5bbbb2e77f68d8

  • SHA256

    034447df9e9fdc8db623c620d54d7e8d169fb903195653bb17d1a2caa0ac169f

  • SHA512

    4bc2d5ec94bf5566d2f292fb4f503736203d99d70ad0a776655b51e0e4554a5dc2c3ab785bebcbf912fe01ccac9057219130a4870e8fc9adc8087e744a5d5675

  • SSDEEP

    3072:d8S4s69gQu2l1/+lEH52BIPUVQ+RwM+IB+SaDtsA4+rSzPDJ8e8h0n:KS4s6Pl1/jUhtcSMtsASRH

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

146.59.161.7:48080

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2344580x0000000001C400000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections