General

  • Target

    904-97-0x00000000003D0000-0x0000000000400000-memory.dmp

  • Size

    192KB

  • MD5

    cbe06647ca42402c1bbc0954873d5646

  • SHA1

    4ebeb99a655ae228dae3ecb3e9f27d84ac2bb524

  • SHA256

    ca8934e7728529a435e76390f5f3f311cfed61759bcf7f6c6bc61de747960718

  • SHA512

    538b0d114c8c1629eace5cd47fba47939e2cb8e211b954943c4fd475effe12111a2d49e2787deb66975ef3e35404d73720a2401c8dd36d3e5164190b29eb13a0

  • SSDEEP

    3072:AtE62xyQ6d+VeXdxNLgVK880EHo8e8hK:AEmOA9S80EHo

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 904-97-0x00000000003D0000-0x0000000000400000-memory.dmp
    .exe windows x86


    Headers

    Sections