General

  • Target

    2140-83-0x00000000001E0000-0x0000000000210000-memory.dmp

  • Size

    192KB

  • MD5

    f5e1de51894a4a567c415cecd444dbd7

  • SHA1

    2daaf7894eed0030d870c6784522cbce91b6a0eb

  • SHA256

    63c2d1a850cea1ad59f9e75a4330fd43304625821f481cde9f84319ecbe3633b

  • SHA512

    43051de59b30b40c55131f63b3524544381cb383de964d59fa2c23c20496e08a032bc655a833d30d923fcd0bfdd44706660ffe684eb769cfdf6e53fb3b6e2ead

  • SSDEEP

    3072:XN9zgaHeuGhriktrBxN3kuZ+zdz78e8hj:d9Ie4rhTodz7

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2140-83-0x00000000001E0000-0x0000000000210000-memory.dmp
    .exe windows x86


    Headers

    Sections