General
-
Target
2496-354-0x0000000000AB0000-0x0000000000AEE000-memory.dmp
-
Size
248KB
-
MD5
575fa7232aba3f34a0c85b72fb91f669
-
SHA1
d7256d350ccb28dda2d12d9d89d3781ee82d246e
-
SHA256
695468e51a24b91a6dad1103bbf12148712cef495e5fd31b774ddfddf0a1012b
-
SHA512
237310bc075a8bbb8924631d9258e58cdef7eaf096de145168ae8772fe5e5cae4b4a951ed3f1a4983e5f71e169d201cc2a4a35d7e43bbe4e80c0e1c9f7804651
-
SSDEEP
3072:/VyymrtnYNgctkfHrUkFTQmX1DJVt/qqfb2/fluHdOLj:9yymJYNgctwLU21/Rb2/fY9O
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
YT&TEAM CLOUD
C2
185.216.70.238:37515
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2496-354-0x0000000000AB0000-0x0000000000AEE000-memory.dmp
Headers
Sections