General

  • Target

    2788-2-0x0000000000400000-0x000000000043C000-memory.dmp

  • Size

    240KB

  • MD5

    d85baf87a2d21cbe5b103ca542c738be

  • SHA1

    60c391b8a2e3cdc482c6f82c23bc43eeb2dff922

  • SHA256

    5e502cdc16bf83613a5b21f4800452d3406c6a827af06d41de8bced62a7f65a9

  • SHA512

    3c3fd16afb0c6970bca7e0dd21e3320a2cfe7b74a3f82620ce06d9b14df85eebc5364d87a7e22a18091ae948232033c3004543286a19dfa9ddb3ec6321749045

  • SSDEEP

    6144:Dq/O7ENgc5gBrgun9veY0mX1SnlAZATC:DqTNgc5QrdnUlAZATC

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

ne1

C2

5.42.66.12:47081

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2788-2-0x0000000000400000-0x000000000043C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections