General

  • Target

    2280-15-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    fed936768fe71e404d7c33950ca92ecb

  • SHA1

    bc1111a2ef27f9c6fb81fa41253ce20d8da94703

  • SHA256

    4e95a1dba9cb59065689f17300e7c1b6739e18bc446ecdd107451ac096109eed

  • SHA512

    af3ceb89217bb643ed3a7647afe2763bba2609f3ffb8ae1349e81712776f9ba957e8a3ee855b9d9d265e03312f5a14e9e3967d9b3e782534e98768f7cc053c79

  • SSDEEP

    3072:Cq6EgY6ifrUjjbmYwPhXh4UjTAjtESi3kcZqf7D34deqiOLibBOa:RqY6i8wPP4UjTAJEpkcZqf7DInL

Malware Config

Extracted

Family

redline

Botnet

LogsDiller Cloud (TG: @logsdillabot)

C2

147.45.47.36:14537

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2280-15-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections