General

  • Target

    1736-1094-0x0000000000A40000-0x0000000000A7E000-memory.dmp

  • Size

    248KB

  • MD5

    45817f2b02c1dd33135e191b733cb6a3

  • SHA1

    929f4ade50b6e35032ffe44a773b60a2117a668a

  • SHA256

    21276518cb25fdf819cb1b9e2c3456ac705b2602979bb37481cefb956db9c579

  • SHA512

    e9ff86482a483c569e6c50a1a70749b09ac37f1ade6435eaa095a76a6bed856ce7552daf7100600ae9e397aa42af5b9834ba5729ad8309fa1e83853fdd339af9

  • SSDEEP

    3072:sihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyv:s+lYXNgc+144OLquOZ/CZovTqHybFh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

grome

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1736-1094-0x0000000000A40000-0x0000000000A7E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections