General

  • Target

    2784-1135-0x0000000000940000-0x000000000097E000-memory.dmp

  • Size

    248KB

  • MD5

    fcf1eaac68c9d41a532590cf161f3369

  • SHA1

    c5c6db5fa46ecf93358a05ddd1358e545253ba9d

  • SHA256

    43bfc97127d1238bcc071712a00c0dc2033f4bff80548a2281a539d741ffc338

  • SHA512

    a165f05d85de0ba82c1688273396737378b4b3eda51c2a09022e78e4fa784716e699b13ca6fd345b53ba52579027f4d69cdcdc7ffdac2e734d7c81d003d10025

  • SSDEEP

    3072:kafto4niNgcr08sO6vvwQRfQPXCZ7eYtaHpKt/q1JlhHv5XGM83/+wE:3ftTiNgcIXHnaBYt40/qlhHBWM83/+

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

supera

C2

77.91.124.82:19071

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2784-1135-0x0000000000940000-0x000000000097E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections