General

  • Target

    2332-3-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    742536b39cac0bc9f9abdaf490c50bf8

  • SHA1

    b02840c0314ed6cf4eafe4b5fc21acece7198a09

  • SHA256

    d702c3e7a0b9ebcb88020f9cf170eda34733d46899272dec2a5fbfc6b6720e24

  • SHA512

    f1208426b36a7506d835a0aff7cd8f1de18b78c546943dab298bea8bb4bf7ec0dfc93eeee97a01d356d91f3206dcf510fbf7c98d07c030412cd73bc69924359c

  • SSDEEP

    3072:3ElKthWFjI0SdbnhOibbzHDvVC3jE0i1rUfoTzmoJg8e8hO:EK4jI0SdbndrUjE0bfoTzmoG

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

smokiez

C2

194.169.175.232:45450

Attributes
  • auth_value

    7b7d8a036038ab89b98f422d559b4f8f

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2332-3-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections