General

  • Target

    5348-697-0x00000000001C0000-0x00000000001DE000-memory.dmp

  • Size

    120KB

  • MD5

    7023866cf87d0457ddf229c1489b7311

  • SHA1

    6e5a6c8e48b1523e31dab3261d928f11fcf7dff9

  • SHA256

    e0262424ad80b8b8ac3753c8dc71e61d54c1160bc5294cc2ef4fb015c2f0fecb

  • SHA512

    f77a14aa1b2f1e93fa8042954ae032c267da003794637bcfe8e2b4e63308306f549c7aac2cdd2178c5667fc52baf5cf02f2c1ad575395e94bc03c2a777ce076a

  • SSDEEP

    3072:I3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVXI:IeGKDRAXb

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

6012068394_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5348-697-0x00000000001C0000-0x00000000001DE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections