General
-
Target
1884-32-0x0000000000090000-0x00000000000CC000-memory.dmp
-
Size
240KB
-
MD5
d7a658dffaf179896ddddb01f953e42f
-
SHA1
50eec413a40fb421087380b4b4a6b07dc992661f
-
SHA256
c05795a5003ed762662e75b1688f759b85b24b0f8c37c4542c0f8c0e0e158fad
-
SHA512
21da1e4977ce148de87d0a8e47319021b7ed5699443773c7d7c41bf5ff5cb17024f5bc9419a1ac753f6c2f234f655ca99fb2aade370fc0c2264d0324d0571a30
-
SSDEEP
6144:gZQSq7dNgcFKsrSJkkpj/Ux74c0d01SH0xWSwMPGO:gZQBNgcMsrIjgMcy0xWSwMPGO
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@oleh_ps
C2
176.123.7.190:32927
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1884-32-0x0000000000090000-0x00000000000CC000-memory.dmp
Headers
Sections