General

  • Target

    872-97-0x0000000000340000-0x0000000000370000-memory.dmp

  • Size

    192KB

  • MD5

    d58c04c5a7e13b8f43a248abc7490cc5

  • SHA1

    901b3d26fbd2cfb9f1ec624dc30ff8427a624f83

  • SHA256

    65b6817b2792fdea4154f677ae6be86b651bf1449a7ed439dd8b84b5c04245f8

  • SHA512

    368466270c1f207555f3b499ceb8dfee653b7b8b1accbfb5bf4e0425d8cebf34d3493a78661bfa18c91be0ca8b9cffac6acb5d61ce66b7d892e615c11ad9e75e

  • SSDEEP

    3072:hN9zgaHeuGhriktrBxN3kuZ+zdzZ8e8hj:n9Ie4rhTodzZ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 872-97-0x0000000000340000-0x0000000000370000-memory.dmp
    .exe windows x86


    Headers

    Sections