General

  • Target

    7176-260-0x0000000000900000-0x0000000000952000-memory.dmp

  • Size

    328KB

  • MD5

    7e3d010e30cab98bb43d016c346df751

  • SHA1

    c2ee585b840e50a51d8ac4d561fcb02627cefdf8

  • SHA256

    f81484fbcade8dccecea8c610b1ad65a5bacf350d9a1a7fd6b0f9471896dfe0f

  • SHA512

    0b091da9dd46dda6e2d3ed3a56569f4f71d95ab7b12698ac09719405c20d5de35b954de62964195ffd4f672499baa7fbc4e04b60e33affbf67ab29e5245230a4

  • SSDEEP

    3072:o2GLL3Y8QRrvRLsbMSNXkTS+IIBWmd1XinNzx3hEAgkVMRqT6Dv/YieqiOL2bBOz:NobMM+tBV1sx3SAXVMRqT6D4wL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

uniq2

C2

195.20.16.190:38173

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7176-260-0x0000000000900000-0x0000000000952000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections