General

  • Target

    2088-97-0x0000000000260000-0x0000000000290000-memory.dmp

  • Size

    192KB

  • MD5

    847d8c583da9cc178a53054a465b4007

  • SHA1

    aaa6003ae8a0ee1f37e32b3840f2f5fabc7c8eab

  • SHA256

    0438d74af6cb5ce9fa9babe71eb32bc63294852d8b23c297757616961f0dd8c1

  • SHA512

    b4931381930b5504785cfdd0c7ee32702410c8ae8377eb412cf16890797693518a7ea2d1f05e1b02475c80e1c88f58297d914745d2d598c0806d3943f595d549

  • SSDEEP

    3072:pN9zgaHeuGhriktrBxN3kuZ+zdzT8e8hj:/9Ie4rhTodzT

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2088-97-0x0000000000260000-0x0000000000290000-memory.dmp
    .exe windows x86


    Headers

    Sections