General
-
Target
1932-3-0x0000000000400000-0x000000000043E000-memory.dmp
-
Size
248KB
-
MD5
5c364351793cb6c4b43a8d50ba736315
-
SHA1
4fa7e66da644c09c46c90178b60d199f37f5974e
-
SHA256
84976fa60ef98e80c91986b116d7c82d53f04122f97b064e17ad0a3296debcf2
-
SHA512
8d4635444b9d742bf60d68f81ef0ad61ff0094febe04aea034d0a8a3f348b8593e45f73d95f89dcd41eb9f71a34e2933085160f92abae7b384905671e0ae14c0
-
SSDEEP
3072:/e2wJ/jponHNgcBbMjPvXxxuPCet/qTjmuKslB1sq:m2E/9oHNgcB4jPvxxvw/qmuKQ7
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
unique285
C2
194.169.175.232:45451
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1932-3-0x0000000000400000-0x000000000043E000-memory.dmp
Headers
Sections