General

  • Target

    2304-97-0x0000000000250000-0x0000000000280000-memory.dmp

  • Size

    192KB

  • MD5

    74b9a77061d3a4b9adf01490eef9bd19

  • SHA1

    954d1491524c9bac4a0909530a4d8c7663bfe152

  • SHA256

    af37256a31d0720f9494aeeae13e1fa3a49715fabf96950e5b1be98c44efe7c9

  • SHA512

    7f468878cc7c3592971844a01ab5c20d4a8ff68f174b7ca772fa12281cd7f92be4d3a5925392bebfb01de175a76d729f68497c74dc67752a092c93b5809dc178

  • SSDEEP

    3072:hN9zgaHeuGhriktrBxN3kuZ+zdzm8e8hj:n9Ie4rhTodzm

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2304-97-0x0000000000250000-0x0000000000280000-memory.dmp
    .exe windows x86


    Headers

    Sections