General

  • Target

    2480-62-0x0000000003EE0000-0x0000000003F14000-memory.dmp

  • Size

    208KB

  • MD5

    878d4f5514d43f8537365f74e8bdf077

  • SHA1

    ff7d0a5f84798b06fd62ae5543256859a4acc264

  • SHA256

    ca2ce0402412a81cdc78cd0c4cc9b1d542c3cf270aac509c366633aecfbd2b96

  • SHA512

    5638f8069f11857ba3600089486fceab521c26b0eb7b2894e53259a716bc685f36602af9bd25a4074cade5b44f211af45ef5ad8c6ad59eff7642ab6dfe01e229

  • SSDEEP

    3072:brrs690Gg877NFEk42BufCdNXOvwenR2hO2m4+wGze+z8e8hB:nrs6k877zNOoenR2o2mvJ

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

178.32.90.250:29608

Attributes
  • auth_value

    3a050df92d0cf082b2cdaf87863616be

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2480-62-0x0000000003EE0000-0x0000000003F14000-memory.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections