General
-
Target
2952-914-0x0000000000D20000-0x0000000000D5E000-memory.dmp
-
Size
248KB
-
MD5
d8f889714dafa55caf338e2bed4a508c
-
SHA1
7fbd08d7c3a9acfbeb4690e22febfd0ce3a93aa9
-
SHA256
9014ec5d99f931c0d489422edc76bd89af5903ef3d0fb9bb013aa1eaa4cf2481
-
SHA512
13a7e69d279b7a3c249ddc4650acd97bdbd3825abe8efa151cfa300b29a90071d640630ff4dbd8cf226592816e363803df64f06f854f19fc8b294cdfe408946f
-
SSDEEP
3072:8ihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyt:8+lYXNgc+144OLquOZ/CZovTqHybFh
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
grome
C2
77.91.124.86:19084
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2952-914-0x0000000000D20000-0x0000000000D5E000-memory.dmp
Headers
Sections