General
-
Target
1412-958-0x0000000000FD0000-0x000000000100E000-memory.dmp
-
Size
248KB
-
MD5
30319ba544320b6ac3b6e7bf718fc0e4
-
SHA1
f9351007c7a11bafe0fd50faa3a07b723dd5fe42
-
SHA256
3293f0a8098d9b1bd2d60fc3a86dc29d009d7307f72c6ff926dbcdd1cc4a965a
-
SHA512
de9227d2491f4c936e48a206a1eafa68cd24818ec57b462ef78e80d43ca93a66383352dde0b443166e5cc51e37227234c4429adce44fc087af679140a6721fe9
-
SSDEEP
3072:tihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhys:t+lYXNgc+144OLquOZ/CZovTqHybFh
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
grome
C2
77.91.124.86:19084
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1412-958-0x0000000000FD0000-0x000000000100E000-memory.dmp
Headers
Sections