General

  • Target

    776-97-0x00000000005D0000-0x0000000000600000-memory.dmp

  • Size

    192KB

  • MD5

    9e0f62212cd40d33a625b4064a614fbc

  • SHA1

    34bdc45f27b08e4df1728cd8f90784f8347925e8

  • SHA256

    6997605d7f16b9b1c00a2ded14d9196d6da6644d0f3326b0a8f0fe4e90dabc4f

  • SHA512

    267574b42a6dc7e87be1f37addfd42ff30cbd4d26bc5142557f6b399c15d20c1c5b2c46aa914266472f40ad67c9e24aed359aab7c46cfd43b0d58f2e4696c16a

  • SSDEEP

    3072:AN9zgaHeuGhriktrBxN3kuZ+zdzO8e8hj:O9Ie4rhTodzO

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 776-97-0x00000000005D0000-0x0000000000600000-memory.dmp
    .exe windows x86


    Headers

    Sections