redline | 1568-703-0x0000000000940000-0x000000000097E000-memory[.]dmp

General

Target

1568-703-0x0000000000940000-0x000000000097E000-memory.dmp
Size

248KB
MD5

0d92b1f90a81e4ba85d33b2390c72132
SHA1

929b4d408340eecf9e5d372b21bea9c85a59bc77
SHA256

20d6e87ba6e8d34627fa5368e8ce1de70588dbf18b46a35cc794a2959f9a8623
SHA512

2eaa6eaa67af9ed30a2247ebd2e98660c8e3d0dc6265649cdfb2ee5a8d7cbca1ba76fba877bbd434730952f919586186c8d5cc18a283a3e226cd4b24110298ac
SSDEEP

3072:tihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhy/:t+lYXNgc+144OLquOZ/CZovTqHybFh

Score

10^/10

grome redline

Family

redline

Botnet

grome

C2

77.91.124.86:19084

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1568-703-0x0000000000940000-0x000000000097E000-memory.dmp