General

  • Target

    540-275-0x0000000000570000-0x00000000005A0000-memory.dmp

  • Size

    192KB

  • MD5

    ab16459c3f0d59702ee614159140ebec

  • SHA1

    1fdf3d65d4dc40ed8f9052f8812f5f3d3e12bead

  • SHA256

    c69bfe793717a7b4c5d5a037f0057d4e79781d60a3bc5f97cb14276ac59b301f

  • SHA512

    32887e71370243cddfa9324b8b0e5c2ab89488cd23cecb34d46e267d64f068b23242cf82e996fa72601bca97d5a78fbe25cf2819079cc7a445b2084ef2cc5c60

  • SSDEEP

    3072:xN9zgaHeuGhriktrBxN3kuZ+zdzY8e8hj:X9Ie4rhTodzY

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 540-275-0x0000000000570000-0x00000000005A0000-memory.dmp
    .exe windows x86


    Headers

    Sections