General

  • Target

    1992-97-0x00000000003D0000-0x0000000000400000-memory.dmp

  • Size

    192KB

  • MD5

    0fa6cf19815d00c35880d6053adea7e7

  • SHA1

    5007fbf157b149c4b599aab78965e80a16c98a4a

  • SHA256

    5727fe6bfa6ecf7a1118e63430a920c21da3b9369bee4047db747e38d01b714c

  • SHA512

    068ebe1741f93194f9c6814201d9f92017bb84c41fb5ba535a8808a0fc73b095c0955b4628b179d70ba95295d73b386db12c6ab2feb9db9f2ae8cbdf52b79cd8

  • SSDEEP

    3072:XN9zgaHeuGhriktrBxN3kuZ+zdzu8e8hj:d9Ie4rhTodzu

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1992-97-0x00000000003D0000-0x0000000000400000-memory.dmp
    .exe windows x86


    Headers

    Sections