General

  • Target

    2356-54-0x00000000002B0000-0x00000000002CE000-memory.dmp

  • Size

    120KB

  • MD5

    1af9797f590c72fc70088517e069b185

  • SHA1

    724a3dfe5ca50da7961693a1015bfc2954055263

  • SHA256

    8dda2efc25a06a14c76573026c7042c2de0cce894e23b323db0586cc4dbe90c3

  • SHA512

    650df0a122596b1470b604cba32e933725c513b35e73fa5b4896d51fc559142bb08a86c2314dabb898a91cf5d263c43c148c6dd73380be3fd5edc852975ee8eb

  • SSDEEP

    1536:2ATp9NZjE6oljj9tAtzZM4YCrB/atqgdbibEB/l2kBoSG7:2ATp9DOjj9tA5C4JJatvqEhfA

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5328933591_99

C2

https://pastebin.com/raw/tnW31tPp

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2356-54-0x00000000002B0000-0x00000000002CE000-memory.dmp
    .exe windows x86


    Headers

    Sections