General

  • Target

    904-56-0x0000000000090000-0x00000000000C0000-memory.dmp

  • Size

    192KB

  • MD5

    1744ded248ecdae77a022c0365cadc4d

  • SHA1

    cf30e36adee88d0c24ae2adf48ba30f14c36a0a6

  • SHA256

    3093fd4ff074509322f44ba7b5fc5d16133e1cb3ab88b99251238717be1d684c

  • SHA512

    932056816319a17ba9c071fe3c13f4bdd0c43b4bfef23e46e6152d184a188dc0e6659044f1cf91c0f3731d3ac39f4c92323bc6577459ae95beba6575d6bbef72

  • SSDEEP

    1536:tAsRuqlVZRGWT8/ri4dspuqf0JrNmBbuYJ0Bfer7TGqVMbuwYjKGbBHo83wYkf8c:ttR/t/0NSkerGqVEwOGbBHot8e8h2

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Care4Art

C2

103.173.229.190:18740

Attributes
  • auth_value

    408beb72854e990ab48656f3d1d0ac13

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 904-56-0x0000000000090000-0x00000000000C0000-memory.dmp
    .exe windows x86


    Headers

    Sections