redline | 3012-33-0x00000000002B0000-0x00000000002D2000-memory[.]dmp

General

Target

3012-33-0x00000000002B0000-0x00000000002D2000-memory.dmp
Size

136KB
MD5

00995856867c2cceae81874d4e2df7d6
SHA1

1101fc68af89191206b78a33818fcbf2783cf626
SHA256

dab8b7270bf4ce505b7b8c0aa7e30c0d6ed4ef60e4a7a10b28d3295a4ac63165
SHA512

6559f376b84123b7db25afe1ef25aa61813531eca2e0287512d2b3079cd6db09bed5eef2b07855c16ad3a234c46d585cfc0afd9a1f0ddd01c956600d8e30222d
SSDEEP

1536:rAcbDr5JpAmS4lZyNRxCuCL+22Q4c3P9pdKU5GNby+xXmflMCps6a:rT7j+22QDhFKyoWij6a

Score

10^/10

Family

redline

Botnet

6077866846

C2

https://pastebin.com/raw/NgsUAPya

RedLine payload 1 IoCs

Processes:

resource yara_rule

sample family_redline
Redline family
redline

resource	yara_rule
sample	family_redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3012-33-0x00000000002B0000-0x00000000002D2000-memory.dmp