General

  • Target

    1988-54-0x0000000000250000-0x0000000000276000-memory.dmp

  • Size

    152KB

  • MD5

    a9789ccf4503524ee80d25eac376d14a

  • SHA1

    d669a6aa5e83c1c7918b54b56ddfc8ff4de37fc2

  • SHA256

    72d5a7a629f13cb4c441c47d9910d7fd4a1ca72f0a7976b8fe3c7a97903b7540

  • SHA512

    f23a56f319c4bb1c2578c1f2328d034315c0e69e710af3ab69c2942f350866385705768ed39ceb94b4209cf44a28354fbdba2f257db60a442f1148268e6f5e1b

  • SSDEEP

    1536:ZatcnVHT1+/oXHZmy+fCGeK7jS8VuBm3hUjfSbV77mOmAhsYgibfbFDKsRR:0tcZZRaKGeotu0QmB/IYgafJlR

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

CLOUD YT TEAM

C2

176.123.9.85:16482

Attributes
  • auth_value

    a8d74ed165e7e003f2ebfae75f9a3bdd

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1988-54-0x0000000000250000-0x0000000000276000-memory.dmp
    .exe windows x86


    Headers

    Sections