redline | 2344-0-0x00000000000E0000-0x0000000000102000-memory[.]dmp

General

Target

2344-0-0x00000000000E0000-0x0000000000102000-memory.dmp
Size

136KB
MD5

ee0f1b19a451228e15bd684b4371d9df
SHA1

7d69b47f19631e4fc34e94e47ced9f4cb0b0cc90
SHA256

ce4e98b6f410d97602b8987a9706ac9e2ca7e2197e830a71d2d3c00ca914d873
SHA512

afc5da962f7351e5646bd8de9240ecff540259449d7345db7bcce166b52bf1d886ab9805b0f34631f06f1331929fd88575a46261ba8847e3f0c2c4059c07a25e
SSDEEP

1536:WAJbbr5JbAmS4lZyNRxCuCL+D2Q4c3P9pdKU5GNby+xXmflMVps6p:W2jx+D2QDhFKyoWio6p

Score

10^/10

Family

redline

Botnet

1373752142_99

C2

https://pastebin.com/raw/8baCJyMF

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2344-0-0x00000000000E0000-0x0000000000102000-memory.dmp