General

  • Target

    2380-83-0x0000000000550000-0x0000000000580000-memory.dmp

  • Size

    192KB

  • MD5

    437f4002b2c38a35825ca817bb0f4fb3

  • SHA1

    1db090193fae8cb3f5325e1746fc06a6d7aa91b2

  • SHA256

    1323b333fc7a40262764264f6e5fc6e1b26b87509dbe4f4c84445ee5f2e854b1

  • SHA512

    abde56da2f0d019c3b3fa1de0ff5cef9ecc7a2326a434915557c3a4575374d3779d90cb55cd2e74d6be09214095f2f2502a517e131d6e866bf69e7c38375188c

  • SSDEEP

    3072:SN9zgaHeuGhriktrBxN3kuZ+zdz28e8hj:o9Ie4rhTodz2

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2380-83-0x0000000000550000-0x0000000000580000-memory.dmp
    .exe windows x86


    Headers

    Sections