General

  • Target

    2228-1-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    cfa66b50975707cf43496ed0c923ef04

  • SHA1

    b047c56e771c0d4bf63d690849bd9fc5bd17b73d

  • SHA256

    61a7992880fbc1e6a02f0d67465ec4fd028ecbd29cd9b84520fc6ade7ecbdc5b

  • SHA512

    b32637949b17e667ab16dffdf876b11a045780fce74438d0a6d0d53ff8392bf0fb1f1f63887f514f8faf395f634a284e422f2f19bcfca93fef75c024192b7a07

  • SSDEEP

    3072:fvAEjhPm4tmrEDUdzFkDSuOkZDcXiqEqVyS:fWnKDRAXe

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

317323864_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2228-1-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows x86


    Headers

    Sections