General

  • Target

    2752-1-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    65ee7c2fb21b593036163830f3a8c787

  • SHA1

    0ccbde667ab274b2d00a2151065b906628dcad5b

  • SHA256

    292d3950c479bdf4b9d26d366da3779169e1c2d99f39f2e3e3d1f814e7fb0aa6

  • SHA512

    eb7c3f9cabf240bdb57857458a3873aaca9a653e1e250343350a8c1645f48e9d72763e930e82ed466e056a1db160b19b7343ef8931c2244cdf2cff1701174427

  • SSDEEP

    3072:HJPBMkyPEZI0yLQByO3lWgMgimE0c29jkJG8e8hQ:9BMgZI0yLQBYmE07kQ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

2309

C2

176.123.9.142:14845

Attributes
  • auth_value

    d759513f6e927690e8c0ed331c91c588

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2752-1-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections