General

  • Target

    2100-97-0x0000000000330000-0x0000000000360000-memory.dmp

  • Size

    192KB

  • MD5

    006f878751fdbfd7d14d5105fb989be2

  • SHA1

    49398520582093898b5123a32171c90593d38cbf

  • SHA256

    8456cb04b3b92c13b5f2a4464c246a5a96d9613b77bc5dc7a9574c7f21c9483b

  • SHA512

    9041ee67dee6a5bf0878bcc361ecc2235a5c77101d7c2a3aa840ad6a85cffce5bc3adf5abd946e408abcd2cb6f7bf30fcea936e2f847e03b5f4926dc156f5b0a

  • SSDEEP

    3072:oN9zgaHeuGhriktrBxN3kuZ+zdzk8e8hj:m9Ie4rhTodzk

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2100-97-0x0000000000330000-0x0000000000360000-memory.dmp
    .exe windows x86


    Headers

    Sections