General

  • Target

    2304-702-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    8bae9b58903f9b43ee2399e6acf5daa9

  • SHA1

    a1a99371a92d531c0992f9b9aaf4543036f7b76e

  • SHA256

    ceeeb7bfd1516dc11a316d45fc66198069984bda2e82b19bb68bb5bbd5b42ad4

  • SHA512

    2e85af2afa75172facfc8737ea141e2822691578272d2af69b8f7693fad3f1b63d22fde6ec654572b5d85c0b77597e005223a323e086e677e6d3a6f0d3dc473a

  • SSDEEP

    3072:43HcjBPe7NerE+CrFkDSuOkZDcXiqEqVR6:4eGKDRAX1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5141679758_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2304-702-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections