redline | 1496-8-0x0000000000400000-0x0000000000422000-memory[.]dmp

General

Target

1496-8-0x0000000000400000-0x0000000000422000-memory.dmp
Size

136KB
MD5

f236b701ed9699d083e9bd1539cdcc78
SHA1

ca2bdbdc964aa9767ade7e35aabbbe0d8c8b38b0
SHA256

fe69468053531a45768604b4ff5822c719147286d54cc143eb867ec9f225b360
SHA512

a11d1488e89243fc938ea2cebd6fd66e1a2332b403eeed04470a5521d7f4be812b9657d4c3483bff47c94791d1aed97677c0970f3ed03b44bec54fef9f12d1c6
SSDEEP

1536:DArbbr5J/AmS4lZyNlxCuCR+z94N4c3oJQpZ6FSnH8Nby+xXm8lMU8HI67:Dsjj+z94N8oaYmyoWvHo67

Score

10^/10

Family

redline

Botnet

6894345723_99

C2

https://pastebin.com/raw/8baCJyMF

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
1496-8-0x0000000000400000-0x0000000000422000-memory.dmp