General

  • Target

    2776-2-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • MD5

    02e5c9122e218b0f3ac81d4c38b50921

  • SHA1

    86529c55c8fb392536ff58922cd49f7edcfad77d

  • SHA256

    27d6e2d5f50e5b4cdc78adbc8bed2fe8d4521cebeff13ccb3a46a7f0ac7b5ce3

  • SHA512

    5445bd1374e82ffcd3eafc839b78c7f000d2454e7285845ba33b2827ba408edb2010a1ee5c8c29f73334d16feb13ee15c56f48e7cedcfb3cf6409d3b7082ad9d

  • SSDEEP

    6144:rrzkuv7SNgcD8rPEsCxG90EY1SGSI11AK:rPsNgcD8r/CSI11AK

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

194.49.94.181:40264

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2776-2-0x0000000000400000-0x000000000043C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections