General
-
Target
3016-12-0x00000000001C0000-0x00000000001FC000-memory.dmp
-
Size
240KB
-
MD5
38bc9d99f09602b5ec987f081b7c6177
-
SHA1
e5916aa5b4aa1e719719337334bdeb60d21eac69
-
SHA256
610214737475af2410a2e8333e9d74c1afdd7a3d990d4e08a1aeec83ecde263b
-
SHA512
5bdf577494b478ba40ebbff57b09632509cfb1354591b46c71f829ddd6a7598b0377f921403f8a15f066039fe3e6cbce951116d7604185cf974e0c12d5a53f5d
-
SSDEEP
6144:MC4gdz070NgcoTrFzO2DzzzzzzHLzzzzzzzrzzzzzzzzzzzzzDzzzzzzL7z30yfE:yO5NgcoTrp9LrorsI
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
LiveTraffic
C2
77.105.132.87:6731
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3016-12-0x00000000001C0000-0x00000000001FC000-memory.dmp
Headers
Sections