General

  • Target

    2736-996-0x0000000000030000-0x000000000006E000-memory.dmp

  • Size

    248KB

  • MD5

    e2fbdae562e72d9cc2a0035de8d561cc

  • SHA1

    d5146d1ffb93be1a683f362072cc19e1a1a69823

  • SHA256

    b0c03ee1d60053803f06cc8e9f827a6d6b9fae3e302fb6ca98cda7bddc9734dc

  • SHA512

    8a516d3025ea02bacb2c317761de1670a650f80e9978651a5d1898c120bfef4d5546b5dda56507bf91bf344ae731e699409c5c81feb3d3411c64f1ee67eb5089

  • SSDEEP

    6144:bmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:yHQNgcPf1JROBNFygk5

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinza

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2736-996-0x0000000000030000-0x000000000006E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections