General
-
Target
1304-161-0x0000000004D00000-0x0000000004D3E000-memory.dmp
-
Size
248KB
-
MD5
d98d3754a298958f337b01b1e51820ca
-
SHA1
5a948811607043b60dded70d4dd0e10691075bea
-
SHA256
2738544f123386069546191e265c960f75a55cff47e274a467a092aa1a91a3bc
-
SHA512
77045b26d7aa1a6491d0afbb13ea572a15ab45ed8504b63da4e10cf7fa6ea895c2e2ed79445f352219afccb73dae17ff6a499cd408dcb744bbd133cc3465c1a7
-
SSDEEP
3072:hJctOPGO2n1NgcU6YW8qu7SHBFt/qLdVPMxX/jEIgcRA:vDPGv1NgcUVWCuHF/CXPMxXLEfc
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@ytlogsbot
C2
176.123.4.46:33783
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1304-161-0x0000000004D00000-0x0000000004D3E000-memory.dmp
Headers
Sections