General

  • Target

    2784-264-0x00000000012E0000-0x000000000131E000-memory.dmp

  • Size

    248KB

  • MD5

    3e5813c0dfee64e969fab766d1425ed4

  • SHA1

    37fee05e5f663c12c65609d9b6d83ebdc68dff85

  • SHA256

    598142d5abd3620b6c14f4818af2bd15ebe37787395af44553ec8c1177c26db7

  • SHA512

    6fc2cdf6fbe275ea713a98af0765b81808617709a756a7e54fc289ac01f6ec4f84bef2a19a5b81d27fee1dcccf2f7ff94bf3c14077d66313f3206d5149772ece

  • SSDEEP

    3072:HtaCObU4nXNgcBGkc53UID4N3wGt/qrhtCX7IWB4lAVL:HtatbTXNgcBRm3U/UtCXk04lA

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

homed

C2

109.107.182.133:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2784-264-0x00000000012E0000-0x000000000131E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections