General

  • Target

    2100-97-0x00000000002C0000-0x00000000002F0000-memory.dmp

  • Size

    192KB

  • MD5

    4bc76eb6275f85a3796ced4d7bbf0c01

  • SHA1

    7fa2534794717712bbc5f4bc6d54260d0cc2be60

  • SHA256

    48d6a27d62bad24cae64acf012cec0bbe0b07795a0902c90d2bc05ffb764f4f8

  • SHA512

    093391153d2f3c25fb292741d366d902a57211e0b02075e10cbbd28280fc8cbcbac1387b90e06bda791c33e073a787e0b368fa5061e8a86ae0af34a7750d638a

  • SSDEEP

    3072:oN9zgaHeuGhriktrBxN3kuZ+zdzB8e8hj:m9Ie4rhTodzB

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2100-97-0x00000000002C0000-0x00000000002F0000-memory.dmp
    .exe windows x86


    Headers

    Sections