General

  • Target

    920550x00000000000F00000x.dmp

  • Size

    4.5MB

  • MD5

    e6d6ddc8de48707baaa6770b34f65d3c

  • SHA1

    7f0450fa767ffa70f5c2efb55ffe226118da777b

  • SHA256

    34a0d01a7529c165f687651f12c4853155a5f0843b2af38f255ababedce72d7f

  • SHA512

    7af08ec646e00785beb3ca2636c38b71ca654d84c5743f19abf86d2431517717286b6060063af3b8ca298ade8a357082680f344cfaa1e08ca0ee945530d5cbea

  • SSDEEP

    49152:Y9KrUj8deYIP0UDHpYfeZjFbED5VExTUjBl+Tzl6n0AG7ZZSyoWei+sJ0UBMeX:YorUj8wYIP0UDJYfevpxABqH2lGX

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Z

C2

n57b30a.info:81

Attributes
  • auth_value

    907a217c291f74c1a111fc9371fe2803

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 920550x00000000000F00000x.dmp
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections