General

  • Target

    2228-535-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    442aff4f8d7031cde44db7427cd4b203

  • SHA1

    7ea999943c5bae2a4cf6885a2138dbf71ad7538b

  • SHA256

    2c50bec809b7b7be78a9e6fb2053d5f8f6092cb4ebdb2e1f82a700e2875bac4b

  • SHA512

    2e719d5de4af8193c7e378e02076212f48748999ea92823e314a04bc1a9c1486973924144763990a08c7d2488ee7b81a8b5f8c81940681affbde20f4587a8c1d

  • SSDEEP

    3072:C3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVR6:CeGKDRAX1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5141679758_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2228-535-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections