redline | 1968-1082-0x00000000008B0000-0x00000000008EE000-memory[.]dmp

General

Target

1968-1082-0x00000000008B0000-0x00000000008EE000-memory.dmp
Size

248KB
MD5

ca2abd18d51c525801f39f53849b8382
SHA1

ea07b9fea72beec63289536b4674dd5020e71769
SHA256

567c5d8a5d1f1dda4b86b15cd45daf10e9ac8e97856c6536b3c4c51a5ae5a841
SHA512

dc95bf45aabe0d0d1cfca53297e7b646c45e87f9db72d5b2c29e69a472f09843096c9f0b71f2cbe779b1309bb155225da956ab268a2bb3842f3a3581ed8d9d9c
SSDEEP

3072:mihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhya:m+lYXNgc+144OLquOZ/CZovTqHybFh

Score

10^/10

grome redline

Family

redline

Botnet

grome

C2

77.91.124.86:19084

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1968-1082-0x00000000008B0000-0x00000000008EE000-memory.dmp