General

  • Target

    952-113-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    9837edffae2281dfb3acf6261a3998b8

  • SHA1

    0efd243c47e49e7e01751d6e2c9691d344b4443b

  • SHA256

    0d6ec01e96e0b0101f8a5f2ba5828e4a5547bc0dbb00a42ce1ea3280fcff60f5

  • SHA512

    04549b1346ed2af9c0d6b96013bd72f9b8736667dccd321329dcc4d2180a635c2bec916fe00573f1bea6ebc0b8de6a65f23dc75aec1d94dab1c35189609c5f89

  • SSDEEP

    3072:BUUEa9Te3JQBf8td3/oxN1ULH0tyq8e8h4:C7QRyi1tyq

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mucha

C2

83.97.73.131:19071

Attributes
  • auth_value

    5d76e123341992ecf110010eb89456f0

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 952-113-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows x86


    Headers

    Sections