General

  • Target

    2144-1300-0x0000000000220000-0x000000000023E000-memory.dmp

  • Size

    120KB

  • MD5

    5bd2c82cf189dfd536bab3d36c05e693

  • SHA1

    7c94c60f5c9380297e985b69ccea82dca96acfee

  • SHA256

    7c085bd624415a24050e8f6c0a7c4c356944cbdb289951a9140e516ae9818397

  • SHA512

    8ba150dac1e56b796dafcc82d81a6385b8d1755c033876c6079aab65488c986193b668323f553909017caf8bedd92561c27c77ce7e667adf549518c431a3bef0

  • SSDEEP

    3072:y3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVRa:yeGKDRAX1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5141679758_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2144-1300-0x0000000000220000-0x000000000023E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections