General

  • Target

    2128-97-0x00000000003D0000-0x0000000000400000-memory.dmp

  • Size

    192KB

  • MD5

    abde3b26e77229583588b577cbe66f02

  • SHA1

    645d48eeb8e60d72cbc8795e552365e76f6e0aa7

  • SHA256

    26e74c0093affbe82cfc6539a577a52d1bb29bb9fc5bf029182bb408cc795742

  • SHA512

    f8b3673bbd73f391291f77896ca50c1337fa661dbd0dc1923d821a97b426bfcee667612627acda4d3bdce6b3531e80fcb8f90f27b3996a62a88afb97a17dc689

  • SSDEEP

    3072:dN9zgaHeuGhriktrBxN3kuZ+zdzu8e8hj:T9Ie4rhTodzu

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2128-97-0x00000000003D0000-0x0000000000400000-memory.dmp
    .exe windows x86


    Headers

    Sections