General

  • Target

    1152-55-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    083938f4646d7b853bd46f7d42b841ff

  • SHA1

    170199374cc9979485e910489fac6d79a6910ddf

  • SHA256

    f1d5092a582b34d27eb96378df01db5f76273b219ea4a926ff36b9c88312fcad

  • SHA512

    9bf43b50251be9bde75365853369a13a9cdc21b9600a4bcfee0abd469db9199769447b655f582bf3333343963531c9a375bd529811e83271ced3a68f605e91a1

  • SSDEEP

    3072:+PvG3NKuI0pd5adoO0UhFjkMJEstE0yMJXMK237xWeUJl8e8hp:+PzuI0pdUdJkMNtE02K237xWeUv

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

smokiez_mix

C2

194.169.175.232:45450

Attributes
  • auth_value

    487069a534eda35cad16294d172be8c7

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1152-55-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows x86


    Headers

    Sections