General

  • Target

    2712-273-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    823b94427d9c2c19799aab9569b1e1a5

  • SHA1

    4d002038a38ede9e45ffdbf85cdf8941a1786826

  • SHA256

    7861aededcbd416999c2ff29516186fc1cd783cd7db26583dde9e79c7e2260d6

  • SHA512

    5c08aa3d7507a954ab71298c5d93e0d5d8f5b3f869bae037a765a50a3e37dec1932baed9ba68198b78f063f7cc987fb8c222424af2d0b0d362bfe6e65459022c

  • SSDEEP

    3072:9cyqhnyFgELfJUkwAKQmrAOYE2ViJH3Q9dznO5NxzHs4cadS2gMRqTjDv/Yneqi5:qO5E1fx7tcaAXMRqTjD4pL

Malware Config

Extracted

Family

redline

Botnet

@RLREBORN Cloud TG: @FATHEROFCARDERS)

C2

141.95.211.148:46011

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2712-273-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections