General

  • Target

    2636-33-0x0000000000230000-0x000000000026E000-memory.dmp

  • Size

    248KB

  • MD5

    3db599da6e0fab3162eff12b74ff74fe

  • SHA1

    4e3bbd1b2fbbf973e07fc1214f4cdb349ff0ced1

  • SHA256

    7c753778ac9078c3fbe76497fa4222cf22fe694f5e4ff1552bdeb177efc4d8ab

  • SHA512

    727019d449dc80b38d28b0a062bc80cb5608b6b337e64af4ea2db61eeb4a7edf93275334f8a9ea7140b3668e77778f011cebaf5d32cdafc11adbc9f9ea079036

  • SSDEEP

    3072:kaFQmt7LnRNgcZEvzGm3Kvqw4i6t/qErWASZ5bCHy+yUzE:TVt3RNgcZYzGwKvRK/TnSZhmy+yU

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

installs

C2

91.103.253.6:22884

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2636-33-0x0000000000230000-0x000000000026E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections