General

  • Target

    2732-2-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    b3adaaff367f78fea418006b551e7d1e

  • SHA1

    e82f2d23ad70b5ca707e901a368f0bb2d6bc4afa

  • SHA256

    0ad9dc4cf0d42fda3a8831c596b68e7ea9fd42602edd52193eb62b9cf52585bb

  • SHA512

    59df4e5266c7daba847edc6292d296bd25389661490d8f6541869c7f65dba94c491e687fe876a314d8baf589d98bc3607bdc17591379aa77f41618266fe674c5

  • SSDEEP

    3072:XDZcbox3qI0dxaw5O+VhdAFDE028O1a/2z0J:zZzqI0dxaw2DE0ka/2z0

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@kulksiz

C2

94.142.138.4:80

Attributes
  • auth_value

    3dab3ceca24ea538d8394ba1e961637e

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2732-2-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections