redline | 944-941-0x0000000000990000-0x00000000009CE000-memory[.]dmp

General

Target

944-941-0x0000000000990000-0x00000000009CE000-memory.dmp
Size

248KB
MD5

e959ffa00e292984b33329d6852fa658
SHA1

bca00125b9dccdec21930a824d78cdbecc4f123c
SHA256

5757c18f80bf6e65431253e64253cd4170b07c917e3a0edf3d5c03a4ed81305f
SHA512

98245c55534e02ca9a166081d874649280e962ff5c05e6f2ca5d82bccc5f63509ecf908a3faa184bcf2de8417b488ddd80d36cee93d59dff44ccba7030571590
SSDEEP

3072:bihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyA:b+lYXNgc+144OLquOZ/CZovTqHybFh

Score

10^/10

grome redline

Family

redline

Botnet

grome

C2

77.91.124.86:19084

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
944-941-0x0000000000990000-0x00000000009CE000-memory.dmp