General

  • Target

    2908-23-0x0000000000400000-0x000000000043E000-memory.dmp

  • Size

    248KB

  • MD5

    924d7146b7b75c3b119c4d5e20232bd8

  • SHA1

    0d3b6d32605bbe3c536eb72c1e66ec736916f388

  • SHA256

    88c8d08ce8e6301541602b1a70479f6d13ec576eea323be83ffe08002f69cbcc

  • SHA512

    91f1f0696963932bf3f40a889f210d4e053c587a04ffe1e58abb5fd97723b8371ca5ffd4a091c87b515d865b8cfb981044f8a1444201b59137d24ed33513da53

  • SSDEEP

    6144:bVnShH3HnMIGjywNG3n119Yc7jtTKv6Wn:bV2UcFVjtTKv6Wn

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

100k

C2

194.61.2.74:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2908-23-0x0000000000400000-0x000000000043E000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections