General

  • Target

    2680-1118-0x0000000001320000-0x000000000135E000-memory.dmp

  • Size

    248KB

  • MD5

    a417a02fe6e2d78de02f645dcfebe9cc

  • SHA1

    7c3e2f3a6decc5b0a73c5c674301f48c3c929e38

  • SHA256

    d45a41fdbdaf41e68febe014065559a48299dc3899fecf0ef9f4b9598d0ae96e

  • SHA512

    0e41bd9175b21a108702c173d1ecd59b99ae5451ec23b21cce62c3b9569e494a7dfa0ca2a5bd97f7c35429b42fe1455743c666f2870ea0024a9e17cc4a183933

  • SSDEEP

    3072:LVyymrtnYNgctkfHrUkFTQmX1DJVt/qqfb2/fluHdOLt:xyymJYNgctwLU21/Rb2/fY9O

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

YT&TEAM CLOUD

C2

185.216.70.238:37515

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2680-1118-0x0000000001320000-0x000000000135E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections