General
-
Target
2348-382-0x0000000000400000-0x000000000043E000-memory.dmp
-
Size
248KB
-
MD5
d84cb75228bd36c91265e679239ad957
-
SHA1
6d73ab9b1e8dd8139369416af3155cee79651a36
-
SHA256
dfac67407ba00cce70a208b8ee43560194c06ba466a3a9728d8bdb44310b71bd
-
SHA512
808358f85a6d3b3de2f69d447862ce1cc92022bd9393d99c40b54a4a1043dbeb5f1ba516eff6fd2656d78bad4b725232c16a0da738b66b926fc793b73b630193
-
SSDEEP
3072:/EjJpWunbNgcc+fw1nRKlnwT84Zhct/qR8NbtS6Gbmhmadg:/GTWubNgcc+I1nRKlwTQ/PNbtS7Khma
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@ytlogsbot
C2
185.216.70.238:37515
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2348-382-0x0000000000400000-0x000000000043E000-memory.dmp
Headers
Sections