General

  • Target

    3036-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    f75f8cc9a030a7371904b94b35ab5f48

  • SHA1

    2b3ef85672786c96b2afdd72d660b21fdb2fd14e

  • SHA256

    311569ebcda31002f9532e4d5ccd3cc25ff1f3e2e6566a083c7c46dd6d67b28c

  • SHA512

    eb8c76e0e18c6bb9ba51f81e511384524979599600b622a04816862bd5dbee38efa12ed565cc52e40f8d42242e33aaac440fcdcf9d1c85d4c44bafbb040e6ac6

  • SSDEEP

    3072:pN9zgaHeuGhriktrBxN3kuZ+zdzm8e8hj:/9Ie4rhTodzm

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3036-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections