General

  • Target

    2216-0-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    7abfc27fc20a366ee906081124922731

  • SHA1

    eec51c518d1d90196f510ede7f56a106424516c3

  • SHA256

    a73af0cd9f96ee1afb829d40f30463bd3fb2cc021dd5f74b348e972081e00d85

  • SHA512

    443f99373f282041f1b0c9ad90846219a70ca2d52805253a839b0705370e4157b3067596edcd0dc56f472e7052efd8839073812b7674aa26a5eb1dd305cac9cf

  • SSDEEP

    3072:tcSRfLY0HI0quMxZVOTpdzbyWZbSE0OzdagVhSSJo8e8h/:tzRLHI0quMxZiSE0ynVhSSi

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1509

C2

176.123.9.142:14845

Attributes
  • auth_value

    e8ab62d10d26859f42bdbe0489305426

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2216-0-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections