redline | 952-715-0x0000000000150000-0x000000000018E000-memory[.]dmp

General

Target

952-715-0x0000000000150000-0x000000000018E000-memory.dmp
Size

248KB
MD5

9446555594ab5fc097c25d1fda02b01c
SHA1

6e8e4d771e8cf2e44b2f5a6dc625e60dfb7bab56
SHA256

278d943104e6985af9707a1434e84c7c4b615d4bfc6255ee116f4eda5c5b72ab
SHA512

949d9fbf4cff3cb0d0d878d0c1b2681089c512a755ff5e82d677ed538042719badd6bed4793f244405d2194087b808d0d6c77655e25830ee23439428cbc174f1
SSDEEP

3072:oihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyU:o+lYXNgc+144OLquOZ/CZovTqHybFh

Score

10^/10

grome redline

Family

redline

Botnet

grome

C2

77.91.124.86:19084

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
952-715-0x0000000000150000-0x000000000018E000-memory.dmp