General

  • Target

    180-271-0x0000000000490000-0x00000000004C0000-memory.dmp

  • Size

    192KB

  • MD5

    659985dd2446f5689fac10ef3945c33e

  • SHA1

    af5473f928a5bb7828049636eaa9e531d87db31e

  • SHA256

    9bd64bd11e6be2394327b98c6ecb8a0feb256323cf83a867e69fb618fd0c2c05

  • SHA512

    dfea49ed8e70e41452d4a5bd326b331de0b88bb6f5eb0d783a40cfabebeda35eed3b77536f7ca8c356e157aaff006ef1930c28f7feb453a2861c0fc0e3c570ff

  • SSDEEP

    1536:ghbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRU8e8h3:glEebE6Cyk9i5/uGxNMS3azNn8e8h3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 180-271-0x0000000000490000-0x00000000004C0000-memory.dmp
    .exe windows x86


    Headers

    Sections