General

  • Target

    2260-364-0x00000000001A0000-0x00000000001DE000-memory.dmp

  • Size

    248KB

  • MD5

    5788401262b236055df4666a854a33c6

  • SHA1

    3b2deb3b62ed29aedc7b1e492a9e3721375e661f

  • SHA256

    b6cd67dda0d30a4c9d91e6b92a97c6cc47f25e3fa2245c2a0b01d792607ed83e

  • SHA512

    3f0747660465284ff4e5e1cf5e637ea2202f801cb947f48648339d3992152dc92dfe64beaa7202f0de0d4d65fcd2f5eee1016d5409dd5481272c8b7533c00acb

  • SSDEEP

    6144:OgrADDNgc6jYb9PXl3/f8FuAqSkiLWD+a+:5rEDNgc6jM2LO+a+

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

tests2

C2

185.216.70.238:37515

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2260-364-0x00000000001A0000-0x00000000001DE000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections