General
-
Target
2508-57-0x0000000000400000-0x000000000043E000-memory.dmp
-
Size
248KB
-
MD5
c7d0139efb8496196c8f29ae9ce15149
-
SHA1
951a725fb045914c3fa2ff87e881c7c9b6a574ec
-
SHA256
434324730114ebeb6498f5ce4cb7364d751e019a6666a107e378ea5ebb83335a
-
SHA512
4167381b83e7776b4ebac39f90392f3ec1c0be1b7d9eba6acbaf52700e5350edd983a36c3b293bc774a2c065f5afba9b905badac425f7651727feba80bf93b1c
-
SSDEEP
6144:HddhdGNgcl4+xlV6+MRleJ/+PU1raKSuXyAXO/:HXPGNgcl4+xlV6JeJdSuXyAXO/
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
genda
C2
77.91.124.55:19071
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2508-57-0x0000000000400000-0x000000000043E000-memory.dmp
Headers
Sections