General

  • Target

    2700-109-0x00000000002E0000-0x0000000000310000-memory.dmp

  • Size

    192KB

  • MD5

    bac2220009f8562773413e316b4f893a

  • SHA1

    506b95c75a9eea0a9dabd5fd6f6ea73599689446

  • SHA256

    15d4fad38e32e320367fb9ed19f326dc4e13f6316cac2734b69dd0b23c82c8f9

  • SHA512

    487ca62413dd29ccc6c1949b03c046e7cfb3a5ed4f579a0fe32721d11037270d25e30b684a46551271ff722d781755f7db41255f1d0eb98e05ecf3e408e9d778

  • SSDEEP

    1536:rlBA36sv0W7T1sjvrHzbNSISuiiB0J57TNyQGxNXLYQLrbuLh8yrEHVF+0GkRX8U:rrqCnNsZWSZ5GxN8yi8yIHVF+Y8e8hO

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2700-109-0x00000000002E0000-0x0000000000310000-memory.dmp
    .exe windows x86


    Headers

    Sections