General
-
Target
964-761-0x00000000009A0000-0x00000000009DE000-memory.dmp
-
Size
248KB
-
MD5
b3f3d5da7bd8f08f4962266729c72e87
-
SHA1
600ef86513ae220d54dcf4844217ab7b10a59cdb
-
SHA256
75bcc22412307412702ab6c7bd1ac5d8e76d3e3afbcc7b03fce4ce06357e0289
-
SHA512
73725e5866f9d14d39681ebb2262e16e7d764e4072a07a388e5e9e87a94b9d2755149e276d2634360d44ac2e69fb9e572a0013fddb0c9a5e5484c117ce8ee18d
-
SSDEEP
3072:KNv0S/yQKnhNgcoVQqw5TmJOXkXt/qYJanR1TaiV0VnCkMSR:Ki4y5hNgcoVQJ5n0d/tanR1aQ0VnCkM
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
kolyan
C2
77.91.124.82:19071
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
964-761-0x00000000009A0000-0x00000000009DE000-memory.dmp
Headers
Sections