General

  • Target

    2732-118-0x00000000002E0000-0x0000000000310000-memory.dmp

  • Size

    192KB

  • MD5

    47fd003962393854e2bc3d0c831a4116

  • SHA1

    4fb1560795dca577519d575e0518d774f3594c19

  • SHA256

    73c3544b276e923e034a877453922b74cc41f1527416481d4c20b078683e60db

  • SHA512

    01f085e9710f4bf762bfc30a9716903d4130c3786fd8693e8c9e4c5ce373f69addb1b621f02c3894e87736cc185d6ae6fe16ff3b9a437c034776081f30d00fad

  • SSDEEP

    1536:4lBA36sv0W7T1sjvrHzbNSISuiiB0J57TNyQGxNXLYQLrbuLh8yrEHVF+0GkRX8U:4rqCnNsZWSZ5GxN8yi8yIHVF+Y8e8hO

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

masha

C2

77.91.68.48:19071

Attributes
  • auth_value

    55b9b39a0dae383196a4b8d79e5bb805

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2732-118-0x00000000002E0000-0x0000000000310000-memory.dmp
    .exe windows x86


    Headers

    Sections