General

  • Target

    360-83-0x0000000000900000-0x0000000000930000-memory.dmp

  • Size

    192KB

  • MD5

    df7fa6d374a6f18c9381f599d8491cd0

  • SHA1

    094958923a575ab6ceab1a7102a8ea4102107770

  • SHA256

    619c9ee7bb884a89a871020c15de580ff9799278515ae25faad3e5b9b5475783

  • SHA512

    eb2920eb58240428bcd23d04e54f99b82afab1142873e3d63112575ede683f176f263c9915c8e0d8129d3584d3c8005d929655b32740b6b54843f5baa125ab79

  • SSDEEP

    1536:9hbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRX8e8h3:9lEebE6Cyk9i5/uGxNMS3azNE8e8h3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 360-83-0x0000000000900000-0x0000000000930000-memory.dmp
    .exe windows x86


    Headers

    Sections