General

  • Target

    2232-12-0x0000000000160000-0x000000000019C000-memory.dmp

  • Size

    240KB

  • MD5

    b689ac14f16a7d11ac841b719a73d0d3

  • SHA1

    2300acff88e753afc3b9605278b5af39138c480e

  • SHA256

    080594104d71a9d12db4bc94c07f0880a7d00e891712558f9b3251f8269c2ea9

  • SHA512

    35aafa89afea620646243b9b1376c17e2a6adfb87a2967a749ffc7627663e7095df76c9f7c42f7fb0439a1793b3df38c5aad4ce016080c39c01253d3695649f1

  • SSDEEP

    6144:zC4gdz070NgcoTrFzO2DzzzzzzHLzzzzzzzrzzzzzzzzzzzzzDzzzzzzL7z30yfE:3O5NgcoTrp9LrorsI

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:6731

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2232-12-0x0000000000160000-0x000000000019C000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections