redline | 2064-247-0x0000000000590000-0x00000000005BE000-memory[.]dmp

General

Target

2064-247-0x0000000000590000-0x00000000005BE000-memory.dmp
Size

184KB
MD5

8d258bd05d9d6838aaebe3be397dac6a
SHA1

9a2d316486b1729019c538bf8ad59f49c09abe87
SHA256

826df26b97e1a62305ffd9f6f3920fa5159146d73d8333c8690ff35be77b531c
SHA512

31fe56a9fef1900b35a5192cd8d0369d2c42782ca72de52a30177ead536890237265c075ae54dc3b9904482a4c42e048927d0fdb30c6226a4c6ccc13a57edb0e
SSDEEP

1536:wW7YNKNqTqlVZRGW3vprDSMDMUs3GHc/0ilTGqVObufksWiYoTTx83wYkJ8e8hK:w3NKYyZSSK28/aqVawXYoTTxn8e8hK

Score

10^/10

test redline

Family

redline

Botnet

test

C2

77.91.85.137:81

Attributes

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2064-247-0x0000000000590000-0x00000000005BE000-memory.dmp