General

  • Target

    760-112-0x0000000000340000-0x0000000000370000-memory.dmp

  • Size

    192KB

  • MD5

    6c8d4f3530279aa2817690364219ee76

  • SHA1

    a7e57b7df560470bea3790db3675580dab8f3398

  • SHA256

    edbd1ed664ded97999188f4a4f79628e3e88c7b085e2ab7f66544423ac068b18

  • SHA512

    9b6f1ef416467232e4cd325211cd211317e26fc7416c55478468e8f0549cc2e0b43b6e0c2ae60f33a25b304469515be64ff4949b1b50915b3da2cdaa53cf75b4

  • SSDEEP

    3072:YO64zyFlJDGx0HqSYxNXUfMim4G3z8e8hE:sf1s0HZ8em4G3z

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

norm

C2

77.91.68.70:19073

Attributes
  • auth_value

    1514e6c0ec3d10a36f68f61b206f5759

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 760-112-0x0000000000340000-0x0000000000370000-memory.dmp
    .exe windows x86


    Headers

    Sections