General

  • Target

    2232-2-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    5bce80533f5465fa996fc4022f2d8ff0

  • SHA1

    366d80e52ab172bc052d359e3c151e17e24bf2cc

  • SHA256

    3897f1307d0cbbcbcfcd498423b125fb4d7338d76e69d4a64d761ae3b10d738f

  • SHA512

    fbc20aa57e830711ca66cf1cbedb6c4778dcc1aa458a1f2ccb009839e4e64a4037ff64efd925e752c56d41e4c70d7f98f3e909940c9a523555be764a4f6139e9

  • SSDEEP

    3072:k/MXvBvsI0wr3RhuOmLsFEnT4E0Sn3C51NSJ:k/MZsI0wrBhs4E0J51NS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

smokiez_1

C2

194.169.175.232:45450

Attributes
  • auth_value

    e49d5cc41e562b8a51ac9deafefa34b5

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2232-2-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections