General

  • Target

    2244-97-0x0000000000390000-0x00000000003C0000-memory.dmp

  • Size

    192KB

  • MD5

    210d40ebe2a8f42c14ce00c617c3d091

  • SHA1

    ceabff443af9edada662d21f5cf99803a2816221

  • SHA256

    45c97c8229a9947362943823b3c0cc103159225e9f0917c3e022cbcfa19c12f1

  • SHA512

    ffaa7d92b27d08c3e58ccce3fd8779eb469c0884d8772370ff60371c9c775f9f74b2975817cf2d56b1e1ce36c6ae788c84e276567b4a3514dee6408216f82920

  • SSDEEP

    3072:oN9zgaHeuGhriktrBxN3kuZ+zdz68e8hj:m9Ie4rhTodz6

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2244-97-0x0000000000390000-0x00000000003C0000-memory.dmp
    .exe windows x86


    Headers

    Sections