General
-
Target
2688-1150-0x00000000001C0000-0x00000000001FE000-memory.dmp
-
Size
248KB
-
MD5
d138e114efdfe465a8b0273b6602293f
-
SHA1
219212db250c06020f886fb4fafcc0c6030e25f4
-
SHA256
f12433f87b7b0ce2672e9599fd4e9fce2770732a10331de8d2cb1ea825b9baaa
-
SHA512
0a7617b84548f5082269f1914bd36cc4c21068705369ba48dee5f46a04972f701cfe169625a4aa831eeb4658879c927db3031106b792d38b3ba8288b76946a8e
-
SSDEEP
6144:JmSQQNgcPf2iHv0+9JR/xadbzBNFygk5:oHQNgcPf1JROBNFygk5
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
kinza
C2
77.91.124.86:19084
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2688-1150-0x00000000001C0000-0x00000000001FE000-memory.dmp
Headers
Sections