General

  • Target

    740-83-0x0000000000290000-0x00000000002C0000-memory.dmp

  • Size

    192KB

  • MD5

    723469f60bb9d97edc4d12ffe9041ed9

  • SHA1

    932614e255c85577e29e80c67484119db5d3b47c

  • SHA256

    1c6ac8d621e13c3e0be5f74bd90dec0972f38ea6728d5cf2bbf91c43d789d81a

  • SHA512

    e6bcc09c03c2e27ab868700e0c307ffb2131b8b7164edf93b44ebdbb5182996cf6bce64658a75e8fb3f18841254da79b8be41c31f75e34e68793f87031510df9

  • SSDEEP

    1536:ghbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkR08e8h3:glEebE6Cyk9i5/uGxNMS3azNH8e8h3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 740-83-0x0000000000290000-0x00000000002C0000-memory.dmp
    .exe windows x86


    Headers

    Sections