General
-
Target
4328-737-0x0000000000400000-0x0000000000452000-memory.dmp
-
Size
328KB
-
MD5
b3227be0904af609d621aec3d1c36fd9
-
SHA1
617d5cbd2b5c43ec9f23bcea63b7e0a3e785fe4d
-
SHA256
d8d98a6d78582112e6fab9ba90441c82bb98a176430472c46b40a2124bf30712
-
SHA512
602764f294d5d7a7e3798d99fc451e4cef2ebceb5fe9584629dda0d6e7ce979e860ccaf5ac7c82be3d1a5cb11f65d6cd57e22150e3f11d1681b4801d4a3c2660
-
SSDEEP
3072:42VLlrYWQyEHBLkbspNwxYCef645Yd3KX3nSd+x6hUAgkVMRqT6Dv/YyeqiOL2bU:9RbsiWL+3KSEx6KAXVMRqT6D4gL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
LiveTrafic
C2
20.79.30.95:13856
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4328-737-0x0000000000400000-0x0000000000452000-memory.dmp
Headers
Sections