General

  • Target

    2756-69-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    55bc11144d849fb7737e2f450dd8e0c1

  • SHA1

    48a5bbad831a9295220457b85b0c5105e0d203f1

  • SHA256

    9d45009a4c57f53ab067d53ea88f3582030b2b63d03ffa6099eb36215a70a4f8

  • SHA512

    e979115905dd00aaf310620cf02c3494379b9a2361394b632bab1da651a2464dc267dca9acbeaf6043db1add064525a698bba2323e022fb271f5bb9b27f7a551

  • SSDEEP

    3072:1q6EgY6iHrUj1DeewPMAVTmz+qGwRTAAtpSKGscZqf7D341eqiOLibBOp:8qY6iwwPv9priTA8pIscZqf7DIfL

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

5.42.65.115:40551

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2756-69-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections