General
-
Target
2644-0-0x00000000001A0000-0x00000000001F2000-memory.dmp
-
Size
328KB
-
MD5
8681a70425f4ec3b5629d3d61e72baea
-
SHA1
c4469422d20d95a3c246aa94c22a7a5b8b3adf07
-
SHA256
e124e70c55a2060c5d804654322dd00d11e14ad4e60af132e72925a6af2a0685
-
SHA512
f7ccdcc6444c6e210f4541e51eec5621b30eec12086e284de8e2fe0bb186fc87cb2f3fba2fe0c43148af1637d0dab67e52e4f01397b52157427b31e766f60d9e
-
SSDEEP
3072:c2CL6oYyQB51r1LMbsGNXDCeC2XeB5mdeXjn7hPknxJRUAgkVMRqT6Dv/YEeqiOn:BubsOCmefEeXhsnxJiAXVMRqT6D4qL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@mayotiqq
C2
45.15.156.167:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2644-0-0x00000000001A0000-0x00000000001F2000-memory.dmp
Headers
Sections