General

  • Target

    2236-9-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • MD5

    3d4315c845aa98082887424a3966289c

  • SHA1

    e74e4af21360a084942a6de1f9c3125f744aaefa

  • SHA256

    5e4a74225bc4b7f3b1441b0d46eff6691300de8460d5ecad654a43bf4c607865

  • SHA512

    419909a95ea965758eaf25e328251d984fa284ba147a85c9d068dba3ea82d59261f9dbc27670103e24a460dbd4381806e7866e09e3d54e6d46fd5ed7312e2c13

  • SSDEEP

    3072:GnmR67LNgcflq00ryzlIg8C8u4VWkFRSd4d1ScwN55iMShKS8:Mk67LNgctYryzl/s0Sd1Slf5iMSM

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (Telegram: @logsdillabot)

C2

95.214.26.17:24714

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2236-9-0x0000000000400000-0x000000000043C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections