General

  • Target

    844-54-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    bc5af894ca7e23e5a2aee32907abc871

  • SHA1

    32ba6048bd0a3baa61bc502f5db57ef1c58132c2

  • SHA256

    83195d8f096e07cbe3f9de06f57445bec5f4949f8adb75f0499ff6898fb1a6bf

  • SHA512

    dcd7901a3222f23b177f0d66426ce534cce9e6b30146be04b8925cdb1ed3d5fae3c7451a7072aa6580c3683cfec17ac81e91fbe5688d4784da78286655df8018

  • SSDEEP

    3072:xtE62xyQ6d+VeXdxNLgVK880EHu8e8hK:TEmOA9S80EHu

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 844-54-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows x86


    Headers

    Sections