General

  • Target

    2112-97-0x0000000000290000-0x00000000002C0000-memory.dmp

  • Size

    192KB

  • MD5

    ac2808710360323b5fb1ed881d8d233a

  • SHA1

    bf841031184d49c9a077ba807787dc399e9e14b3

  • SHA256

    d946df4ba4add7e193480235bf961c8dc12e5c234efcb8f81f3a755cb57967cf

  • SHA512

    307a2e77defbefcc905288d2b8cf91af102049644696789e88d0532cb04028c23302f186de74382da952ccb514e95bdfe7745ccf66d7062670b323a19d99899a

  • SSDEEP

    3072:QN9zgaHeuGhriktrBxN3kuZ+zdzK8e8hj:+9Ie4rhTodzK

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2112-97-0x0000000000290000-0x00000000002C0000-memory.dmp
    .exe windows x86


    Headers

    Sections