General
-
Target
1096-27-0x00000000079B0000-0x00000000079F0000-memory.dmp
-
Size
256KB
-
MD5
854a7e38eee8f2890881f82f1d3fa1b9
-
SHA1
9467fa1ef4b42c383205aa5fde484c30c453f3b0
-
SHA256
ccac652570b14c558faeee40f58a6216a7c7d5f9a969486ee7dfc4fef522b1d4
-
SHA512
8bfa57cddc121d1f6ef9ae22bd806bfe2f2c61945d4863ebd510f9c2d5d249ee34d384759da53af8c3b022eace104184fff1aeb56b75681cdf2d785d4708b27d
-
SSDEEP
6144:yv3X7pNgcDkBr3qWiabuHGB0Qb1Sq2Zap3O5gD2Ag:klNgcDkBrC0/T2Zap3OfAg
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
1MIL
C2
185.173.38.57:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1096-27-0x00000000079B0000-0x00000000079F0000-memory.dmp
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections