General

  • Target

    2324-54-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    56e70dec54d4d22f0748538d42154ea8

  • SHA1

    28f398b944e95653c515072bfaead0d655842974

  • SHA256

    8e274a71e97670dddd6288b3ae1829e4cfb38a7bd707a825a76363dc99b2fc8c

  • SHA512

    c18d16c60638a6a8738f889ffc29188aeea108ad5640e2353e566baa8c38beab7c6f772db409ddf25b6480f73450944e3f330f569c0cdf34104ad54bf9ff6b84

  • SSDEEP

    3072:+N9zgaHeuGhriktrBxN3kuZ+zdzv8e8hj:09Ie4rhTodzv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2324-54-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows x86


    Headers

    Sections