General

  • Target

    2336-3-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    005be24ccca38bb322bba62c70594189

  • SHA1

    661989ba2b1dcb0386c8a662b93b96ca35ee59af

  • SHA256

    837485f4834507ab1d1dd506118a490dad908e51344ff4094fa6cab5db6de137

  • SHA512

    8841907cf0a8cad610f9e5f50ac22eab93fd0e8f8db8c57964c3aa02d8a68e3070d43ffc1a248f2f76b67d8289e0062986023b3c59396399db9c82802b1143fe

  • SSDEEP

    3072:a8a4JMUyI0i9ykuOMx/V8GztHteE0KHt67/tJB8e8hO:a8amyI0i9ykqztHteE0d7/tn

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@Black_Santa21

C2

94.142.138.4:80

Attributes
  • auth_value

    5a06838de858adf9064d7d2c59f0d1f6

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2336-3-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections