General

  • Target

    2576-3-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    cc56bb54ae53643ba7a534f566781999

  • SHA1

    9e507bbdf774cd28a81bfbcce8121c0bd2f752c5

  • SHA256

    3c3e9f4f6e5c63aa1416ff09fc9d613d1dc06b663ad54fcd0a297052f52f82cf

  • SHA512

    2fe36208b59567fcb682173ec5855279da1c5ede8f212be37b0029a25a21fbe380c7812d38e9ca25360372728fc5e77cebc972684d330e11770d42783f3c554d

  • SSDEEP

    3072:kRlL+5XgycI0YXupcOlZBqH9YP04ME0q1nDfWT3JF8e8hE:slL+7cI0YXupuYPfME02WT3D

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

146.59.10.173:45035

Attributes
  • auth_value

    c2955ed3813a798683a185a82e949f88

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2576-3-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections