General
-
Target
2372-28-0x0000000000400000-0x000000000043C000-memory.dmp
-
Size
240KB
-
MD5
b5d57b57ce693574a1dcb67bde8e8fe3
-
SHA1
136b4337dbd51c71b7472279a7fe6a162bddca59
-
SHA256
b7ef9a7043c147bd9104dfd32e64c1236ebf1435d9dec4d4b42b2ee223c01b89
-
SHA512
0616029c302da44a012a665ea3c7330e6b07ece860f3b8c2a2f27a26026738633efbc0ff334a68dfaf1a184b2d59cbfe6bf18cc846afa87ce432b8c657668206
-
SSDEEP
6144:zmQmz7FNgcpbrWlPR6Q06dNSmu6Mh+2p6:zmQUNgcpbrDQFu6Mh+2p6
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
horda
C2
194.49.94.152:19053
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2372-28-0x0000000000400000-0x000000000043C000-memory.dmp
Headers
Sections