General

  • Target

    3044-0-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    f65000c8f8d050c3b6ad6b61be1c81e8

  • SHA1

    b7acb15c4f29de6ff141511ce0e095f5af821d2b

  • SHA256

    bb009d137190a041567f29fa7875c0a9763c63094602d982cbe32bf314ec6267

  • SHA512

    41e4758f6c261a1a9f2398dce5fdcec5fbf45a24debe76804e0b5f7a1a90e72fd333dc6fd61c4e44c643ad2c4a0e7a679a66c65e4453c279cb9506c021110977

  • SSDEEP

    3072:kvAEjhPm4tmrEDUdzFkDSuOkZDcXiqEqVyS:kWnKDRAXe

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

317323864_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3044-0-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows x86


    Headers

    Sections