General

  • Target

    1760-54-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    4b16593b263c3047f70996d6a58cafaf

  • SHA1

    ce399ff9906cefed49897027f2c6f3ccd93c22e3

  • SHA256

    1ba46092875a67a63c6857f5de8655ab13e5883e44a14d7510fc82529fd11f33

  • SHA512

    9a120572c5d353f6aa8e5a72f55c3df56b7b8d396f42306e7792c723b29855306459ceb1821afc1dbda97ec5e1d324dc28100b3ad4b7a057bb5e423edb15aec0

  • SSDEEP

    3072:UtE62xyQ6d+VeXdxNLgVK880EHu8e8hK:sEmOA9S80EHu

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

andre

C2

77.91.124.49:19073

Attributes
  • auth_value

    8e5522dc6bdb7e288797bc46c2687b12

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1760-54-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows x86


    Headers

    Sections