General

  • Target

    1140-430-0x0000000000020000-0x000000000003E000-memory.dmp

  • Size

    120KB

  • MD5

    631d7ac01aaad835eb2072c2a185cf57

  • SHA1

    7b8aca687f04d4c5678d57a39b78e72c481292c9

  • SHA256

    119f996ffe21448db70044ada1f8b4d91022f04ff2b6100ed4f9ab0054126ef9

  • SHA512

    bf10f1b87b829e92714cbb5eb91ae31cc968e7c860eb71b718d92f8e382a9162e03e67e931c3f29ea20348415b99b3f1e38539c503de6873af7c1775493cf2b0

  • SSDEEP

    3072:p3HcjBPe7NerE+CrFkDSuOkZDcXiqEqVR6:peGKDRAX1

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

5141679758_99

C2

https://pastebin.com/raw/8baCJyMF

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1140-430-0x0000000000020000-0x000000000003E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections