redline | 2288-945-0x0000000000400000-0x000000000043C000-memory[.]dmp

General

Target

2288-945-0x0000000000400000-0x000000000043C000-memory.dmp
Size

240KB
MD5

906c6abf0b2af195e86905bf470485d6
SHA1

9c16cb454fe41d762790826b869def396496056d
SHA256

a639adedd03b8e3b298d1124d06056de0d78dcd531c9f7e5a5b53415b8dea58c
SHA512

7b8fcf5168d88d706d78b08d1123af5c3597aad1e9513ef491ca4270c10e052ec3eaa398aceb0a2314433feac47e57b1577a5b0be7460fba67894421fd2129df
SSDEEP

3072:/+kwz7rNgck/LeB2rmYGuDwJVgL0RSdxS1S+wF9YuKSr:mlz7rNgckDeUrm8Ec00bS1SzrYx

Score

10^/10

5 redline

Family

redline

Botnet

5

C2

janaremrau.com:80

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2288-945-0x0000000000400000-0x000000000043C000-memory.dmp