General
-
Target
2864-31-0x00000000000D0000-0x0000000000122000-memory.dmp
-
Size
328KB
-
MD5
ace2ed6166ebc57b4075c80ffc7976f6
-
SHA1
ca20490a0122daecac2e7097d356ba597adba811
-
SHA256
0cf95291c48a5e9935ef2690cc7338ae14b0780e4fcad9b8efe2a51be6aa661e
-
SHA512
5d898b4f16973410632e5fa6704dbdb67088ee27f475281cedca404980868064076ea6ce7381f20003cbe32b7aa24a8326c610c96cfeed62435409119c301841
-
SSDEEP
3072:Tq6EgY6iHrUj1DeewPMRyo0kaa5CDdHDLPaAGtASKr1cZqf7D34teqiOLibBOB:uqY6iwwPloYDLPaAiAd1cZqf7DIXL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
LogsDiller Cloud (TG: @logsdillabot)
C2
147.45.47.251:2149
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2864-31-0x00000000000D0000-0x0000000000122000-memory.dmp
Headers
Sections