General

  • Target

    2400-55-0x0000000000090000-0x00000000000C0000-memory.dmp

  • Size

    192KB

  • MD5

    163725ad3342bd5deb31141d5ada7267

  • SHA1

    08cd86341c422e8e523562c228600abe799f3929

  • SHA256

    46986b4567310cc76d7403cf5f44646dcf421ba610c0d31ec15d96481c0f15cd

  • SHA512

    46e7acf6521dd9a7c07ef0d752594b2830b1ef6d08eda193d28e620ebe87978494635cd0a19587d39d38879e446730357a05e4c7c35748c591224d35e00a9a65

  • SSDEEP

    1536:jgKedNi036sv0W7TWKygyvHWlLRsBChShr1xNQlYQ/nbux+vlYroYl0GkRr8e8h4:jAIGPVd2CKr1xNHOVvWroYlo8e8h4

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1006

C2

176.123.9.142:14845

Attributes
  • auth_value

    b5da80860b093905c2bba6f9377af704

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2400-55-0x0000000000090000-0x00000000000C0000-memory.dmp
    .exe windows x86


    Headers

    Sections