General

  • Target

    300-97-0x0000000000500000-0x0000000000530000-memory.dmp

  • Size

    192KB

  • MD5

    d3600e39fb3dc05db0ed5ce49046dcfd

  • SHA1

    9cc7f6fd5029af4fd843b3ba201f53b2cb2ae94a

  • SHA256

    342286eab9bd65221ed65597d979ef70de538cf93a6621646345732af0f535bd

  • SHA512

    63e674a56ed9b04a39246557385a0985d01d90dcc13e55cad132ae49f111749bdd13a34f742a88a42b2a839511113e1191fd9c7b328d206fc585f00baf64e4ba

  • SSDEEP

    1536:yhbEey6y36sv0W7TDGOIrHuyk7xk2W5/uGxNFVYQffbuclGHQ4N0GkRX8e8h3:ylEebE6Cyk9i5/uGxNMS3azNE8e8h3

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

bruno

C2

83.97.73.134:19071

Attributes
  • auth_value

    b23e240c277e85ce9d49d6165c0a2b48

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 300-97-0x0000000000500000-0x0000000000530000-memory.dmp
    .exe windows x86


    Headers

    Sections