General
-
Target
2240-1263-0x00000000002B0000-0x00000000002EE000-memory.dmp
-
Size
248KB
-
MD5
234ff9a7c072975fe9203bbf5e1586e3
-
SHA1
9dc8410e6fed2387d0cfbf694d1536659734977e
-
SHA256
cc4a3b81739b60040ddeeed8dce832d5a85f031a52e4f060eddd698762964bde
-
SHA512
7714ee5c9cf9ebbf9a834aceda8a1f35180def5e7bff8ad6f929f81bfccaae4d4dc8e2343dbe4f69b94e5a8ca4ff4d1a2f6c1a5f8404bb48dd51bc36b49ad2bb
-
SSDEEP
3072:nVyymrtnYNgctkfHrUkFTQmX1DJVt/qqfb2/fluHdOLj:VyymJYNgctwLU21/Rb2/fY9O
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
YT&TEAM CLOUD
C2
185.216.70.238:37515
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2240-1263-0x00000000002B0000-0x00000000002EE000-memory.dmp
Headers
Sections