General

  • Target

    2664560x0000000001E600000.dmp

  • Size

    208KB

  • MD5

    4a7156e52ba2bb5767d62f886b404d7f

  • SHA1

    ca23ceb878780c0a17a743ec1bc862cd8c9e11fd

  • SHA256

    72d115b5bc47565165a8e08bee7b417cf643a8763831f588f03c25ea7917187f

  • SHA512

    a2c9898a708b0f97014c271bbc65e39afed1633198cac7b5b7a7cab51062c154e12a094db546fec57e821ad3ad6c8b054f729f63941e98f0b2dfc122a0c58ea8

  • SSDEEP

    3072:d8S4s69gQu2l1/+lEH52BIPUVQ+RwM+IB+SaDtsA4+rSzPDJ8e8h0:KS4s6Pl1/jUhtcSMtsASR

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

146.59.161.7:48080

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2664560x0000000001E600000.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections