General

  • Target

    2716-63-0x0000000000400000-0x0000000000490000-memory.dmp

  • Size

    576KB

  • MD5

    266d282357e121d66381f1e50508355e

  • SHA1

    729f9716b3ff1e417363f77718674aa32f9f8482

  • SHA256

    db6900e23103558914d04ab1327a9508866e4591d939256efbb8aef47217ba56

  • SHA512

    19f85488d03bc8b7555caa588f6e8e85796190b128650f0893d859cd4e2a0b2baf624742ea855be2c048a42ad84ded7afa4e3253dd26106e57e1baffcf922610

  • SSDEEP

    3072:m23LP/YAQ8W3vLsbCdENUb2S8rdNdAXqnjijcxanhsAgkVMRqT6Dv/Y9+E1bBOt:LlbCdh2PBjAsocxanWAXVMRqT6D4

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

20.79.30.95:13856

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2716-63-0x0000000000400000-0x0000000000490000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections