redline | 540-407-0x00000000000C0000-0x0000000000112000-memory[.]dmp

General

Target

540-407-0x00000000000C0000-0x0000000000112000-memory.dmp
Size

328KB
MD5

d21a76f345436938137878b858311a92
SHA1

017ec33f55fc2b9db9b91e545fe0f2eb8da6c51c
SHA256

8ff9b80aa50049c9f5b026e715b822bb31a8ec1733497d71833f29bb339be366
SHA512

34d6daffc2ac4f42d680c03ebf8b1105cdfb26d1629f496934ba1c17a44329b6c93457d40691eddc21e43b48b03db2507e703af8cd2f195b3dffd4664a355496
SSDEEP

3072:B2GLL3Y8QRrvRLsbMSNXmQogXIdilX+nupxQRmAgkVMRqT6Dv/YeeqiOL2bBOU:IobM+eilRxQEAXVMRqT6D4UL

Score

10^/10

legaa redline

Family

redline

Botnet

Legaa

C2

185.172.128.33:38294

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
540-407-0x00000000000C0000-0x0000000000112000-memory.dmp