General
-
Target
2612-43-0x0000000000D30000-0x0000000000D6C000-memory.dmp
-
Size
240KB
-
MD5
6fdca8601645c3f137165363eaa9438a
-
SHA1
ff64f534de875794c4e42fd4280dfb08c76bfb23
-
SHA256
403b04ac2c2bc3e57fb2ca2c3b7d72996b23d8dba54a83d1f73b8528e9f81300
-
SHA512
b8b86c36b498463c4d0e0d61789976139af39fb460ea2576f81b101abfe97204b9873247f646780c73a171ecd2fc4fe943ae25fbc4b0dc4fa05b5b6cc2076ab2
-
SSDEEP
6144:TZQSq7dNgcFKsrSJkkpj/Ux74c0d01SH0xWSwMPGO:TZQBNgcMsrIjgMcy0xWSwMPGO
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@oleh_ps
C2
176.123.7.190:32927
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2612-43-0x0000000000D30000-0x0000000000D6C000-memory.dmp
Headers
Sections