General

  • Target

    2560-1089-0x00000000008E0000-0x000000000091E000-memory.dmp

  • Size

    248KB

  • MD5

    8e9bc6de3e717c762ed986f2b8492546

  • SHA1

    fe096dc8430e6d288f3ebc7703e55360a7880e69

  • SHA256

    c2725b3942a9ec17608b4bfc327c2e2cde79214f71a23ba0c9ce966693eb3209

  • SHA512

    6d5ce7a641caa8d75245ab13cdf0682b13f5f619ba65f288acb54e6aab961f82b9f2539ab6634bf2940e1472d85ad239863067fdffaf574d0460d6016daf5501

  • SSDEEP

    3072:RihvLpYnXNgc+jZ44OLqNaKe/Gbt/q6ubZovTqpwUybFhyR:R+lYXNgc+144OLquOZ/CZovTqHybFh

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

grome

C2

77.91.124.86:19084

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2560-1089-0x00000000008E0000-0x000000000091E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections