General
-
Target
2764-1186-0x0000000000A20000-0x0000000000A5E000-memory.dmp
-
Size
248KB
-
MD5
9df3f3c1f58919c286f8a25e4828478b
-
SHA1
a755b843e19cddd60f9df8242bbdd869f1850c89
-
SHA256
9059eb98ba5e451029924c8bfcae87cdc3f9a17bc00ef6005df91fbfbed152b1
-
SHA512
e190bc0a4273587c75bf296a9ca3ce765e3dbec5ef182471f27f80b2be7be6b1dc747a82db741749133e7d40b4d47c3d37d689e77e59a4526088a7dedf165454
-
SSDEEP
3072:aVyymrtnYNgctkfHrUkFTQmX1DJVt/qqfb2/fluHdOLA:ayymJYNgctwLU21/Rb2/fY9O
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
YT&TEAM CLOUD
C2
185.216.70.238:37515
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2764-1186-0x0000000000A20000-0x0000000000A5E000-memory.dmp
Headers
Sections