redline | 1084-56-0x0000000002290000-0x00000000022C2000-memory[.]dmp

General

Target
1084-56-0x0000000002290000-0x00000000022C2000-memory.dmp
Size 200KB
Sample230207-egyzfahc68
SHA256 c66a5f3e46e67b7201e4ba85d2d28d76e58db8cffc196daf2888148ca1901121
MD5 3a87bceaf89e70f70971df64f6a65636
SHA1 53791d87967a4d24cae79c7ef92f6ce5d60fbf7e
SHA512 47cd4090b69d29b486ee92c765f0b972256922f970bca94596819f1959239580224cf2bccf9bb90c45ec5f5d6250c6f5e44850b6d082d8b324aeb0ce3daf2f8f
SSDEEP 3072:mxqZWonaxIF63bJqs3sw5ek29whzHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jn:MqZ0bJq2fgwh
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

1 redline

Malware Config

Extracted

Family

redline

Botnet

1

C2

212.113.106.41:81

Attributes

auth_value
a290efd4796d37556cc5af7e83c91346

Signatures

Redline family
redline

File Explorer

1084-56-0x0000000002290000-0x00000000022C2000-memory.dmp

.exe 200KB

1084-56-0x0000000002290000-0x00000000022C2000-memory.dmp

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c66a5f3e46e67b7201e4ba85d2d28d76e58db8cffc196daf2888148ca1901121
MD5 3a87bceaf89e70f70971df64f6a65636
SHA1 53791d87967a4d24cae79c7ef92f6ce5d60fbf7e
SHA512 47cd4090b69d29b486ee92c765f0b972256922f970bca94596819f1959239580224cf2bccf9bb90c45ec5f5d6250c6f5e44850b6d082d8b324aeb0ce3daf2f8f
SSDEEP 3072:mxqZWonaxIF63bJqs3sw5ek29whzHxNn2pU9f2MKTV/wi4lr55R9TxlnsPsUw0jn:MqZ0bJq2fgwh
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

111994

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing