General

  • Target

    924-83-0x0000000000280000-0x00000000002B0000-memory.dmp

  • Size

    192KB

  • MD5

    faada326aafef6cf08d3df15a168f384

  • SHA1

    b4b29906d56a883cdd6b3cbc15718e55e3866c11

  • SHA256

    9a3a72f4eb0dff984c7759e9bed07240ef9d882d6a2b3a5cfb5316a2849e9633

  • SHA512

    60d0e59ab84e1e093e246bfad01557a4de683ab333f8110e3a5f087e20e8b6a6f9d110da321f94d65635954601031db9fab34721d146c94ac73c432f283f4862

  • SSDEEP

    3072:cN9zgaHeuGhriktrBxN3kuZ+zdzN8e8hj:69Ie4rhTodzN

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 924-83-0x0000000000280000-0x00000000002B0000-memory.dmp
    .exe windows x86


    Headers

    Sections