General
-
Target
1200-64-0x0000000000310000-0x000000000034C000-memory.dmp
-
Size
240KB
-
MD5
ccbc4062cf11c8d9ca2a686d4c6ad85b
-
SHA1
41e48fe0d5afb245aa0f18c18abea28f4126f333
-
SHA256
a08d03cf427468b0b5ed5fc86dc8b375545de33068030eadca24df4bcc9bdc09
-
SHA512
25150d3a8754587a084715ebde7ab5bead44709e8ec76ecadae265c32138434b5ee523fdb5454bc4b369234402e41d2ffc2dfe4af31067583e4c26948f2c6ec9
-
SSDEEP
6144:qZQSq7dNgcFKsrSJkkpj/Ux74c0d01SH0xWSwMPGO:qZQBNgcMsrIjgMcy0xWSwMPGO
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@oleh_ps
C2
176.123.7.190:32927
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1200-64-0x0000000000310000-0x000000000034C000-memory.dmp
Headers
Sections