General

  • Target

    1560-2437-0x0000000000BE0000-0x0000000000C32000-memory.dmp

  • Size

    328KB

  • MD5

    be0144b0f4fe7006870bf8ebea09547a

  • SHA1

    a1919f58f704b96b6afedb7a0504ecacd0c1bb03

  • SHA256

    3da5950259ea634ca17df97206a244c85535734bfa563a18afd40ebc00587dab

  • SHA512

    445d1da4c44c759b7d29e94ed8dc2b671987a58275788bcc1f2483bd678934a6a312ba16f0238ba4865d1f5362fe2ef27493d40115dda1a53d0e1142215de0d4

  • SSDEEP

    3072:/2ULH/YYQUuHJLsbK/NdN2S8rdNdAXbnQikhgkxfhCAgkVMRqT6Dv/YAeqiOL2bw:+kbKJ2PBjAMi4vxf4AXVMRqT6D4eL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:17066

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1560-2437-0x0000000000BE0000-0x0000000000C32000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections