General

  • Target

    2240-62-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    89222c121635b3eb4e91773bb1422ca7

  • SHA1

    220736d09c4add2a97ea0274502960ae5e4eefb4

  • SHA256

    daab09c87e7515cc0a793b268c373064f1d5834634907aa5dc38a72662b85d27

  • SHA512

    199dc75e5476076c402f5efa1bda626cb8a676996bcd30ece7106773cb55be2da75b0925e9ae7334dfadc69d610583dce8c09210807cf55840a2c503ab187d5b

  • SSDEEP

    1536:cHmHwr+F36sv0W7TdFs/NsQ5rHUIyHBThxmMAcxNH7WYQXHbuxhEZu9t/e0GkR:cGHwy7PnIyh1AvcxNbNycyu9t/e

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

Artem

C2

45.15.156.21:15863

Attributes
  • auth_value

    cb29a1f65108269e2a5606aabe606677

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2240-62-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections