redline | 1808-54-0x00000000001B0000-0x00000000001E0000-memory[.]dmp

General

Target

1808-54-0x00000000001B0000-0x00000000001E0000-memory.dmp
Size

192KB
MD5

cae52c6acc536c254cf35367fc7c3287
SHA1

bda9b40f63c0bf08427b0ab9dcb326ac9ce533d8
SHA256

854bd59dd1cd920db656ed90e16a39cf464e23e0dfe534e9909d834634088b46
SHA512

cbb5d8dd4eb783a6aa19057893af356760cf593930baa305fb7e85795c82872ec28b7c52d6c3308c4bf268ef66ed5fc1ff37cab8b86f513efd63180773aed30a
SSDEEP

3072:A7FcUMo+9XJIZYExNjGof40fz4+8e8hE:UFzoZLs3jz4+

Score

10^/10

furga redline

Family

redline

Botnet

furga

C2

83.97.73.128:19071

Attributes

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1808-54-0x00000000001B0000-0x00000000001E0000-memory.dmp