General

  • Target

    2032-123-0x00000000002A0000-0x00000000002D0000-memory.dmp

  • Size

    192KB

  • MD5

    b10e667a145d0957e1248573c7ce5810

  • SHA1

    7a60b12c29f7757ad59430aa2b3a52f025baaf00

  • SHA256

    2d2c8625d277e4e1f8721e455ed9a13bcde519ff3cff59c2f08aedb2bc2a08df

  • SHA512

    9109d7094211990ff4d29b503c34a4cc2737d2e6146ee766ca1eafec5bbaced5faebce06f587058e54ce54265f93775f5cac0162e0f9440a38e48d7f1282c3f5

  • SSDEEP

    3072:MnOrlpyS3xp5xN1yJ/4BMzxUdE/28e8h+:MOf7flBMzxUdE/2

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

narko

C2

83.97.73.134:19071

Attributes
  • auth_value

    a9d8c6db81c7e486f5832bc2ee48cb84

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2032-123-0x00000000002A0000-0x00000000002D0000-memory.dmp
    .exe windows x86


    Headers

    Sections