General

  • Target

    2072-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    9650b4f17b42ec532edc3860a8643f43

  • SHA1

    5f963e5fd6cec81c582bd3654015a7554511e196

  • SHA256

    26c89f52a5d50fd845877527917a425c24b92f9f39712e17112579e84948c35d

  • SHA512

    4a0063e23a47c0fa22436db1362c633c22d06f98d9045f25967d3c5fefa68228a4afc26cd3712002cf35844aa2f0718a7f954a5f94950b2251660f91cc0ee300

  • SSDEEP

    3072:7N9zgaHeuGhriktrBxN3kuZ+zdzm8e8hj:h9Ie4rhTodzm

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2072-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections