General
-
Target
2848-667-0x0000000000CE0000-0x0000000000D1E000-memory.dmp
-
Size
248KB
-
MD5
987efb7b554c788e14a234d6c81cc595
-
SHA1
1166ec2ed1a01d2b28cb6266eca28cdb2937409b
-
SHA256
4f119efe2d6576fac92cf59a8e9e801d59c7cb334d3bff68dc7b5e17536a7da3
-
SHA512
52128626fc859e6840f715282267fbb0a9a4bb3f2f04e13ddf843ef024b6de05570e517f0af3e82d11014ee5e65dea76931cedb2f717d48dfa9e7ae1cc3af10d
-
SSDEEP
3072:MihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyR:M+lYXNgc+144OLquOZ/CZovTqHybFh
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
grome
C2
77.91.124.86:19084
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2848-667-0x0000000000CE0000-0x0000000000D1E000-memory.dmp
Headers
Sections