General

  • Target

    2268-97-0x00000000003D0000-0x0000000000400000-memory.dmp

  • Size

    192KB

  • MD5

    40a3c31ea3c43c01fafdeed0abda9557

  • SHA1

    a3838a553b37bf97200e6852387b6b1e6c3f5edc

  • SHA256

    f0dd4708bd92eff65b522b443d34e20bee06f917d6d61881950e0357f41e851b

  • SHA512

    89f2276db0ea2fc873169c5d4c5a1ce2229d5675f598e95e2dc2e0ae8094a6571ae116e881d9b243944f6c60ad65b30ccd45884758eee6b24e5526a94d86df51

  • SSDEEP

    3072:PN9zgaHeuGhriktrBxN3kuZ+zdzu8e8hj:l9Ie4rhTodzu

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2268-97-0x00000000003D0000-0x0000000000400000-memory.dmp
    .exe windows x86


    Headers

    Sections