General

  • Target

    2332-4-0x0000000000080000-0x00000000000B0000-memory.dmp

  • Size

    192KB

  • MD5

    57f61f601d7a7f566b8f9258d5beb468

  • SHA1

    e85725ffd025461f62f3c5e7d0325e574fbdce84

  • SHA256

    f500803f9ba22e65e9de7f7111e887399f504c43e38a792bab467680f0607afb

  • SHA512

    5dfaa24948e6e53b2e3c512e7bae771ec14d1a1b5994d48673ab0b21a5d6299aa5215c67ed1d0e5f701b657584537f08a6a99f6480f9a1cb0f48188dcc8a25f4

  • SSDEEP

    3072:KU3wkV/14I0knO4bLOpRG5p6QsE0CCGgGpy9JM8e8hc:KUL94I0knO4bL6QsE0DGpy9a

Malware Config

Extracted

Family

redline

Botnet

LegendaryInstalls_20230918

C2

62.72.23.19:80

Attributes
  • auth_value

    7e2e28855818d91285389c56372566f4

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2332-4-0x0000000000080000-0x00000000000B0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections