General

  • Target

    2776-126-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    b374f4f00ac4415d58632bc859d03a6c

  • SHA1

    159f465dc80e85462aa83f380ce40db3b6c0ad61

  • SHA256

    7ef96c88ffcaa6d346387c20d64a299d2efb60ca24ac64c56199a779af926f78

  • SHA512

    55b19d30bcc25a522e4b5605ce439c3399e108455738c0a45807cc5c1df17dfc19120f822c584793bf601c53e1074b8b62b669779fc4fcdba13c1ddaf30d9230

  • SSDEEP

    3072:EN9zgaHeuGhriktrBxN3kuZ+zdzm8e8hj:S9Ie4rhTodzm

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2776-126-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections