General

  • Target

    700-97-0x0000000000490000-0x00000000004C0000-memory.dmp

  • Size

    192KB

  • MD5

    c192071014aa89eaa7959ada608f6baf

  • SHA1

    5ce40ae2e15b19d8a22dc9b5325fff3dbfdd629b

  • SHA256

    187bf8427d38214c3dce778dde7f24f0838b11466920b9af0f925558dc2cd14b

  • SHA512

    f30046d77261655c8aab4c102de1ecb07930e98694b1893e10c3225e606158f93bd441076e3bb29ae3fcb7ecb98a64da61c0fd35ac76ad47ec66775e8754101e

  • SSDEEP

    1536:3hbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRU8e8h3:3lEebE6Cyk9i5/uGxNMS3azNn8e8h3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 700-97-0x0000000000490000-0x00000000004C0000-memory.dmp
    .exe windows x86


    Headers

    Sections