General

  • Target

    2316-61-0x0000000002140000-0x0000000002174000-memory.dmp

  • Size

    208KB

  • MD5

    d41d39113b8f269434e52f2df7734261

  • SHA1

    e7363523958a3dbce29591d693891df4636061be

  • SHA256

    046b569b2b319a16831998912c53cf698912f06f4566d2180348d06fad6aea93

  • SHA512

    227a9b22f114e546705b3c5bfa8f56ace29027bd484c07e41fd6280bf1cc5fc4bef62c6bdd7b077f83465f21b9470b5d3bc9cf43b20b8db4ebbee6eb367f828a

  • SSDEEP

    3072:j8vs69J56kC75iEd5b2B6lZsU8BOl2a/N4+khzu68e8hR:ovs6kkC7zBcjBOl2CNgi6

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

147.135.165.22:17748

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2316-61-0x0000000002140000-0x0000000002174000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections