General

  • Target

    2604-33-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    0540db1b0e88845304f477ad4689abb0

  • SHA1

    1087f307f07eb611a2b7fbca4bc755f1c9faf3e8

  • SHA256

    291a5ebfe2cef6996f99666200906e23d6bb324848db7c3044bd7cb7b3e6c8ec

  • SHA512

    8e5a4ff8819331e0c6004f5187d7e440b38f1cd5cfb92194b105fa45616aaa51bbc0e240425feae2a6df77992c878fca685260dbce298a770a6eaa7b44aea889

  • SSDEEP

    3072:gmjuWOs6/QUI0WgHifOsryPtm5OE02arlNHUcsJk8e8hQ:gTW5UI0WgHiIm5OE05rbUcsy

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

10k

C2

77.232.38.234:80

Attributes
  • auth_value

    2cb0fc67f1f413ee2838b025c8663c6b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2604-33-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections