General

  • Target

    1976-123-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    c8c4a136e22a26c3fa7d0bba9b7b9fa9

  • SHA1

    910eded4f13cacccac46b57c8e881cb897b3aaa3

  • SHA256

    5564e95b135b335602654079af93b02b717735ff362b19638671461d5dad66ca

  • SHA512

    fd3ada302acff2efac6116f8aada15e06bd54bec1c2d80992a53f9bfe000665953d649dc88b770e4634479bb7ca9f0616789d8f2b99823b0081944cb837a5f16

  • SSDEEP

    3072:JUUEa9Te3JQBf8td3/oxN1ULH0tyq8e8h4:K7QRyi1tyq

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mucha

C2

83.97.73.131:19071

Attributes
  • auth_value

    5d76e123341992ecf110010eb89456f0

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1976-123-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows x86


    Headers

    Sections