General

  • Target

    2004-9-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    61dda49a5ad35c858866fa29b858abe1

  • SHA1

    139382ffd15c925fb32a8be3c090ead99be7490d

  • SHA256

    70deebd94c2c2bf30bac7e03ce7511567a549ae0f6c3ce8242f75ec36e99b9ce

  • SHA512

    c41704b8cfa91c953639190576b5095b85e7b38662c8515fe77f579c759b91ab64679d1a1bc044a9f47b6db4ff9eca5bd80fcd08bdeb61a3195e3d8f7b5edca5

  • SSDEEP

    3072:x2wLEsYUQzNKtLUbWANieiZixKMD4UydbXwnJQjx9R6AgkVMRqT6Dv/YFeqiOL2w:YxbWxn1bRx98AXVMRqT6D4PL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@mass1vexdd

C2

45.15.156.167:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2004-9-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections