General

  • Target

    4596-4327-0x00000000000E0000-0x0000000000132000-memory.dmp

  • Size

    328KB

  • MD5

    f1bd993db2a8e1da768515002c2c01c5

  • SHA1

    c4ddec1ad2c00bafc2b8345e9c49d1bddc1887b3

  • SHA256

    4da7b82015d4d5df4e287e8177169d29b5fb4d66925acfabc5c71dae4a7352b7

  • SHA512

    7910d45c57485898e5286f47a2967b0c43dde578a7408d12ab22334cd41b67fdd34f71aaac304b3e73aae6eee4561cf07c51192319545c8384da4c234a13ec9e

  • SSDEEP

    3072:32ULH/YYQUuHJLsbK/Nd9iZixKMD4UydbXpn/g+x+7RiAgkVMRqT6Dv/YAeqiOL:mkbKun1ba+xoIAXVMRqT6D4eL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

77.105.132.87:17066

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4596-4327-0x00000000000E0000-0x0000000000132000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections