General

  • Target

    1988-1-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    78a9c6bf1682298aa9c3e69710bf005d

  • SHA1

    47e27d3deaceb1a4a6cd82b8b0d664071c33288c

  • SHA256

    0aabc631f60ba39682028197985ab61e1f5fa185b8e8c6f9b1d61a5cdb63bd5d

  • SHA512

    f00a08261e2ce0d6086e72fbae85952d8e8bebbc1980914e1112cbdb046d3b61f49191d1e0a78b3635546803d7e4ee45c347178a9e878bd27387d38fd639cd43

  • SSDEEP

    3072:HJPBMkyPEZI0yLQByO3lWgMgimE0c29jkJG8e8hQ:9BMgZI0yLQBYmE07kQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

2309

C2

176.123.9.142:14845

Attributes
  • auth_value

    d759513f6e927690e8c0ed331c91c588

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1988-1-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows x86


    Headers

    Sections