General

  • Target

    2360-81-0x0000000000400000-0x0000000000450000-memory.dmp

  • Size

    320KB

  • MD5

    f0ef082512d585a9ef289b8ef005eb4c

  • SHA1

    1e5aa0a2a02baab6a7af3f48e13d16570c38d9ac

  • SHA256

    e462f41f0299979e99547c96c9a8743eed1e3c0549e328ed118d2303bdae8b41

  • SHA512

    10a171f7b888c45698534c2540bcade5f4a1aeacc3252be95f1007a1de0cd8009f503ae047c14ad38023029e9610c8e280b6e58019036fefb520c8f05c73fea1

  • SSDEEP

    3072:WqFFrqwIOGLSy+/YtyVFNG+810+Yj2GtwhdukTZbMHIXcZqf7D34VeqiOLCbBO/:tBIOGlIG3dBTZYScZqf7DI/L

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

5.42.65.63:14707

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2360-81-0x0000000000400000-0x0000000000450000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections