General

  • Target

    2024-55-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    c337dc1d1bad3ab8e0e08a5e830f6b12

  • SHA1

    dde28ea6e97007878cf0d46b1a2277b4d7265a0a

  • SHA256

    9d6322c398ebea4df90a2133410b08ee695fc5239856c6761932ee39d03f2f8d

  • SHA512

    860eccea58c0150f57edd3ce507bea94df872f902aa1dcdf2e0b6f977b91fa425d19fc0c71aa71a4523bbf5ece8cf91abc75188460ece5146d10492d90f80878

  • SSDEEP

    3072:A7TrQcSGCh9C4XrzqWNxNHUK6O9ec+s448e8hE:WTCzLXrzjFT9ec+s44

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

2red2

C2

77.246.110.195:8599

Attributes
  • auth_value

    6afbed7ed4602cb49fec2738a899a241

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-55-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections