General

  • Target

    544-54-0x0000000000400000-0x0000000000444000-memory.dmp

  • Size

    272KB

  • MD5

    4876df0d95982cbb44e3b38ad6bcfa11

  • SHA1

    28ba98cf920b2e4eb61351d6753282073256c724

  • SHA256

    516c795a33ec9c00fa0c0b81eb17ee677a2329f24daea3e0dc45aa32bf180457

  • SHA512

    cdd5f39e408d292b29cd9a70ddfb65c09c620ab8ae78755940731b5b2e8b8d7f39723cbb52515cd8dedc660f417552d4bf54b8116b7ee415f48148e49253aa0f

  • SSDEEP

    1536:aauNQzahPh0r8dXK2MDtydbLtuUI29+xn5MOZbV7cfac96kMJrF:PuNzgryKztkPth+xbBqi1kArF

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5527589964_99

C2

mm1.seirog.top:28786

Attributes
  • auth_value

    adeb66ff8715920adb0888adaec6aee7

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 544-54-0x0000000000400000-0x0000000000444000-memory.dmp
    .exe windows x86


    Headers

    Sections