General
-
Target
1480-715-0x0000000000CA0000-0x0000000000CDE000-memory.dmp
-
Size
248KB
-
MD5
f89b65bcdf5c6fc35d31913b74c6bc5d
-
SHA1
e021027c8a7d45ffbe0ea8769906b036c8e6d845
-
SHA256
ed748d78c422be1620b99ec9e99bbebdd1777d5ea46aeb097b675f7ed46e3915
-
SHA512
d8054841867105b0006292fa3cfb9473ee67c5dcb1b1a00e4b1a69d7f56b767ee007bf22ff1a44339f4f73b8bb699e29b70b61260f5142b26dad9fbc893eaf97
-
SSDEEP
3072:tihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhy1:t+lYXNgc+144OLquOZ/CZovTqHybFh
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
grome
C2
77.91.124.86:19084
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1480-715-0x0000000000CA0000-0x0000000000CDE000-memory.dmp
Headers
Sections