General

  • Target

    2776-37-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    b3faeb7c4ab921fd8b7e8974b9fbb351

  • SHA1

    eae88c1ec7da589165d7614a363c91b89019ed7e

  • SHA256

    d88b79ea1a14111450af60265045132e858204cb17c30a4afdd56e28dd34f6f3

  • SHA512

    28c222d037fae764e493a75bd4479f7b355f90c862e138633cc0116abd3868f62077a329ccfe3b8ab82b1ebc8f958d7cf047b34c5e37bf1d84300bca92db63db

  • SSDEEP

    3072:gmjuWOs6/QUI0WgHifOsryPtm5OE02arlNHUcsJ:gTW5UI0WgHiIm5OE05rbUcs

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

10k

C2

77.232.38.234:80

Attributes
  • auth_value

    2cb0fc67f1f413ee2838b025c8663c6b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2776-37-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections