General

  • Target

    2396560x00000000021100000.dmp

  • Size

    208KB

  • MD5

    de36bcde3ef4f093f0cca512aa3a119b

  • SHA1

    43f6730229096d079aa454ec25206b94d7ae5a9e

  • SHA256

    4d39f621f08529f19214554057dd9a040986092565ca459766ce1283a1287ae5

  • SHA512

    9f59e91734857e6e4c6c10c481a44605caf4a111216a36c7dbed856f2275b9ca8cd89ea4b3bf3792d4758387707536c46d56ab856b5982b150dd92b0844155f4

  • SSDEEP

    3072:d8S4s69gQu2l1/+lEH52BIPUVQ+RwM+IB+SaDtsA4+rSzPDJ8e8h0:KS4s6Pl1/jUhtcSMtsASR

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

146.59.161.7:48080

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2396560x00000000021100000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections