redline | 2444-5-0x0000000001230000-0x0000000001282000-memory[.]dmp

General

Target

2444-5-0x0000000001230000-0x0000000001282000-memory.dmp
Size

328KB
MD5

775b32b34f81e2cda5784f5ea7dd1fd7
SHA1

d3be20d5abd197a930d306c2e746bf2b7f3bf469
SHA256

e305b36c699d374936e5a3a0bc9b55f2151b283c81a0cb49af33f977673a97c0
SHA512

7a740945046e0910ff4b05a12b82ea9facbc6b5d6d18db9860f3a84a96070d68e1acf36a346078915f0092483f9f6754399f98a7ba00976bd67bea6a2db9c7a0
SSDEEP

3072:B2GLL3Y8QRrvRLsbMSNXmQogXIdilX+nupxQRmAgkVMRqT6Dv/YueqiOL2bBOU:IobM+eilRxQEAXVMRqT6D4EL

Score

10^/10

legaa redline

Family

redline

Botnet

Legaa

C2

185.172.128.33:38294

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2444-5-0x0000000001230000-0x0000000001282000-memory.dmp