redline | 2124-97-0x0000000000270000-0x00000000002A0000-memory[.]dmp

General

Target
2124-97-0x0000000000270000-0x00000000002A0000-memory.dmp
Size 192KB
Sample230707-ldbhasgb59
SHA256 d7ea0a5f1ded33d95244c640b8e7060e26b0b5a8e7af4b7dac781cdced002e6e
MD5 c255b6bafe34e945c02f8b9d9e05610c
SHA1 b605963fba35863b451ff076305a9ea35acabbad
SHA512 4ba902e3008dbd21dca71c834ecaab1bcf1de045ca81d8de901fc908160cf8af207b48232615dd1f672a363fe6630b37306df2d8d763b09009812071ba522300
SSDEEP 3072:LN9zgaHeuGhriktrBxN3kuZ+zdzI8e8hj:R9Ie4rhTodzI
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

furod redline

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes

auth_value
d2386245fe11799b28b4521492a5879d

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2124-97-0x0000000000270000-0x00000000002A0000-memory.dmp

File Explorer

2124-97-0x0000000000270000-0x00000000002A0000-memory.dmp

.exe 192KB

2124-97-0x0000000000270000-0x00000000002A0000-memory.dmp

SHA256 d7ea0a5f1ded33d95244c640b8e7060e26b0b5a8e7af4b7dac781cdced002e6e
MD5 c255b6bafe34e945c02f8b9d9e05610c
SHA1 b605963fba35863b451ff076305a9ea35acabbad
SHA512 4ba902e3008dbd21dca71c834ecaab1bcf1de045ca81d8de901fc908160cf8af207b48232615dd1f672a363fe6630b37306df2d8d763b09009812071ba522300
SSDEEP 3072:LN9zgaHeuGhriktrBxN3kuZ+zdzI8e8hj:R9Ie4rhTodzI
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

143102

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing