General

  • Target

    1740-2-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    cdf4cbf11562faa48902865455fb65ee

  • SHA1

    6ff73e06fea38f45c940e21834d5c3ec28d19300

  • SHA256

    019d995e296fdb0256989eeb99bf2256e884d4a8dacc448b410ee9f86710facf

  • SHA512

    98b69d312ea8fdab37fcf442b004b0cf841c7e9f28ef5d94af0ef333facec1c96e28d71ac450d115023d5969f3ed2020cc467088a1d56f6b425ee5da041e758f

  • SSDEEP

    3072:QvAEjhPm4tmrEDUdzFkDSuOkZDcXiqEqVyS:QWnKDRAXm

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5105807056

C2

https://pastebin.com/raw/NgsUAPya

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1740-2-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections