General
-
Target
2220-16-0x0000000000400000-0x0000000000452000-memory.dmp
-
Size
328KB
-
MD5
fcb869659b5418c4992028b975ea40c8
-
SHA1
f47d833e516e72aea1741796a3bc7ed00e2273dc
-
SHA256
e7ef93f1746c15e4452e79157090db9fbb516233db699d19adb23986380e855c
-
SHA512
565bd60ed795810852f3d5ed90c2f9b64cb0ef8eb51086ca562c19bd3f554275e496f7a584c1b01078b1d4645b68e5323fbd6a78087e2c222852004ec6127642
-
SSDEEP
3072:g2JLXfYoQk+nJLMbI7NKhYCef645Yd3KXOncm2xy9hPAgkVMRqT6Dv/YCeqiOL2z:1NbIyWL+3Kk2xy9xAXVMRqT6D4QL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
work28.7
C2
194.33.191.102:21751
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2220-16-0x0000000000400000-0x0000000000452000-memory.dmp
Headers
Sections