General

  • Target

    3044-261-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    971d532674939bbd0149a422c387c7f6

  • SHA1

    acf74b99057a2995ef46a78c66967aec0b3f7942

  • SHA256

    9cf8dd69dc146b621cc30aecf5613c87e1ba6cb00fdf291010477a7c470f04a9

  • SHA512

    d04407b2e53b1671920f07d3ae0cdfe898885b0f5a448727eecff3f93c52776e07366e0887854e3169efffc36fab47872a6e5025a4c679d5ee642bab4d392d9a

  • SSDEEP

    3072:Z3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVR6:ZeGKDRAX1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5141679758_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3044-261-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections