General
-
Target
5888-1052-0x0000000000400000-0x0000000000452000-memory.dmp
-
Size
328KB
-
MD5
d833275c13757aa31e2ac6d2b6a0b572
-
SHA1
87f7ba94062bd68a71a8f1b4c6447f463e8be2a9
-
SHA256
1439b5f762171df50b02875cf88e2627fef8729e6a0ba5c5740dc6e2846a9e93
-
SHA512
f20cf201a042768a76ec69f8930aac77efac49944be9c5c5ede402a9d45b713034312941bc9fbdd333c4a34b1e995900e720e5d86a8f07bfeba0cbea8a7b30d4
-
SSDEEP
3072:42LLL3Y8QoCvRLsbuvZNhFiZixKMD4UydbXhnDgS7Gxk9RoAgkVMRqT6Dv/YSeq9:9Hbu8n1bn7Gx+WAXVMRqT6D4AL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
LiveTraffic
C2
20.79.30.95:13856
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5888-1052-0x0000000000400000-0x0000000000452000-memory.dmp
Headers
Sections