General

  • Target

    2120-97-0x0000000000300000-0x0000000000330000-memory.dmp

  • Size

    192KB

  • MD5

    34e9eb20145cd886188d4df758af5fd3

  • SHA1

    34cef9acf279ffee486743c62e0a9aca9f60c3b8

  • SHA256

    a13320ba2b9caeb482d151ef3769e49945b669418a97ae68d7653f64a3b5b7a0

  • SHA512

    ccedbfd826698e9bce2d1bbeb0c7edf4abc7965638bd65de30168b877c0ad6761413c02e4c30e862f1acba268d187f971c248ce394715d7044016d07b30b8760

  • SSDEEP

    3072:vN9zgaHeuGhriktrBxN3kuZ+zdzl8e8hj:F9Ie4rhTodzl

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2120-97-0x0000000000300000-0x0000000000330000-memory.dmp
    .exe windows x86


    Headers

    Sections