General

  • Target

    2236-22-0x0000000000400000-0x000000000043E000-memory.dmp

  • Size

    248KB

  • MD5

    8927cfb79f6b249c9aaaf6194ec665b9

  • SHA1

    fc4ae77f16f97e598437ef8feb7bac784c3d6249

  • SHA256

    49426c0559df0c5b21866f34cf8d6875d248c519e62c439dfb05ac9ef6b83547

  • SHA512

    bdef741f68442f037d13768fa4750b852e0f69d8783c87a537a4069d4df8ad349c6c2a936a48639fcc7e9596877d54f5d8416f430d1ff3c7c4f54ea2275efefb

  • SSDEEP

    3072:HUzziK0nfNgc8yxtUDPaynHdR97xst/q2ko3RLywWaG:HoiBfNgc8kUDP3n9R/K/13Jy7

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

part2

C2

77.91.124.80:46502

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2236-22-0x0000000000400000-0x000000000043E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections