General

  • Target

    740-83-0x00000000002A0000-0x00000000002D0000-memory.dmp

  • Size

    192KB

  • MD5

    836482ad035960d89dd62ca2dcb49aaf

  • SHA1

    6695c9b5dc5d817c7242208750c114713d036eaf

  • SHA256

    dd2b71b8fffb6deff42dcf16e1f527d148f58f84826f3b05f20439d940b99e7b

  • SHA512

    3bf2433fb916060202e5ea0a838ecb387f28370cfea96c26b7a550ad2a0095c1ce756fb1255b6180bc2b14d3e438dfb108f7cfd12a6a6313c242e2036a3131bb

  • SSDEEP

    1536:ghbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkR18e8h3:glEebE6Cyk9i5/uGxNMS3azNK8e8h3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 740-83-0x00000000002A0000-0x00000000002D0000-memory.dmp
    .exe windows x86


    Headers

    Sections