General

  • Target

    1036-54-0x0000000000240000-0x0000000000266000-memory.dmp

  • Size

    152KB

  • MD5

    02ebdb005cd9dc33bb30f12a6b992195

  • SHA1

    ea2232374810058b06abfe3759033b44cd3f6e6e

  • SHA256

    7aa56ff63474c6df0ce336bd502ae69404959c0cbe1062447f628bb015b2561f

  • SHA512

    af21b538abaff5ef672b688b0a08d443a341a2a9c2431fbbe5fa7b344c0f9302219395aad7defcc575310cc9435072410de0abe5a51f9648a457742de57715e3

  • SSDEEP

    1536:YaCGcnVHT1u/o3Q5O6+f7NWy9Fu/OYmtZhZja9bV7e/8H72+sYgibfbFDKsRq:dNcZZgKjNWgurm90NU0HMYgafJlq

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

YT&TEAM LOGS

C2

176.123.9.85:16482

Attributes
  • auth_value

    63cc484234216dace4114bc03617721b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1036-54-0x0000000000240000-0x0000000000266000-memory.dmp
    .exe windows x86


    Headers

    Sections