General

  • Target

    1556-275-0x0000000000510000-0x0000000000540000-memory.dmp

  • Size

    192KB

  • MD5

    7753e4cfa0389af26b3a3746ed37d314

  • SHA1

    f625f716082dd728e91f651376b03e6ee9d5e537

  • SHA256

    5bea97a2f7178fdf04ed2168e40ad94b8456618840054c84a34561c1e1714551

  • SHA512

    9b76c151a39aab0adfd8e62a2f0d07b1a445e10b8d3e72d5c8af7ff39ae2ebca339414d9bc0388312fa258d13c90b1fb38af7bfb9b345cec61146605ea5c69c2

  • SSDEEP

    3072:rN9zgaHeuGhriktrBxN3kuZ+zdzi8e8hj:x9Ie4rhTodzi

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1556-275-0x0000000000510000-0x0000000000540000-memory.dmp
    .exe windows x86


    Headers

    Sections