General

  • Target

    2716-35-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    eeda0761faa5e4107fc9f035870242fb

  • SHA1

    7c5a107b75fca49135f6e78550c7db90d18be844

  • SHA256

    ccd5ac045b5d1e77c468823df0804f30ddb5525da71b39f8cbb453a6c6b49f1b

  • SHA512

    8da58a49df6443a273e75fd75934c4f9c10863d64c47be8bb53652a5b9b84d65724d04d73e58956c44625ad0c471607ff37b979f642f4d6a460e7a641e50accd

  • SSDEEP

    3072:ofcuNvJTI0Af/37OGC/fhqGbE0gY10UxL5XpKWoUJ:OcGTI0Af/31GbE0R95XpKWoU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

ALENA

C2

77.232.38.234:80

Attributes
  • auth_value

    27c44831d5e2431d6b3f2750a6a0efde

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2716-35-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections