General

  • Target

    2248-0-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    99f03ee257ab79c71dc9151936071621

  • SHA1

    7879f90af97857d214222c3129747843df449ad8

  • SHA256

    cf790cbe0aff36fa313b650f5f75d0efd58ad14f4098c8cecdf6e0093416ba8a

  • SHA512

    c73b6903406b2d63e1a2956106641417892881fa6484952ea08942d3629d04aa9c075163e3088a514a194e7956b9723dec42773fd2061e3e3647a2b5a64a637d

  • SSDEEP

    3072:wFUXSM8BI0emAw4HLOVGn2J4C5E0mAGjGOJk8e8hc:CUsBI0emAw4HK5E03O2

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1smokiez_build

C2

194.169.175.232:45450

Attributes
  • auth_value

    ede3826e2d99f3b3f431bf0addad1a9d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2248-0-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows x86


    Headers

    Sections