General

  • Target

    2220-7-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    f986235cb7bb28f4c5b258f09fc0145f

  • SHA1

    9329aece907fdc3546a8cbc1ce0206e4a99cd5f5

  • SHA256

    cf69014472ba7c752f76446dbc0f83ba7cd3458ee82d68ffa348d0ccc059d845

  • SHA512

    728e2a5545ae1b084b8b3f545915fc8c4f0d74d1580c1a3a86fe85bd291f8b71a894a12fd9d98e3d69c5a6f41387f7a81dbe66d2df89e159c2f5d02c35d1a8ed

  • SSDEEP

    3072:3V3DHTiCNI0ptXDQOOuUSduk1E0SIKZGFJc8e8hi:l3D/NI0ptXDj1E0AGFq

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

149.202.0.242:31728

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2220-7-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections