General

  • Target

    2344-360-0x00000000011D0000-0x000000000120E000-memory.dmp

  • Size

    248KB

  • MD5

    1d59ae36aab972c0614b5dec4192e33d

  • SHA1

    fc3a4a600712ab5689e8b2b9f002e7b6f09f6e7e

  • SHA256

    9f6ac0c09eac57f66dfc82eb845f13e186ec94d03766868fedd08ba9954d7829

  • SHA512

    e2ca1cd33559d181daa4e28a8c491ceacbd0712b1d81443491acbf91303aa6e9ae40d3a2dd2788318a627ba7a38861d28d67f6f115114d55d08f2937a5eb97c4

  • SSDEEP

    3072:gjJsVUnYNgcDTrB2Sr1DDfNt/qOWGkHCfbLCdrUd2t:gjJsSYNgcDn4SZDzH/oGkHCDL2rUd

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kinder

C2

109.107.182.133:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2344-360-0x00000000011D0000-0x000000000120E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections