General
-
Target
2784-6-0x0000000000080000-0x00000000000D4000-memory.dmp
-
Size
336KB
-
MD5
c0481bcacbd2f9c90ec87ee826a728fd
-
SHA1
81fda60a7cf02656afd57728e13f7d566079873c
-
SHA256
7edff6710d7ed45b13fb04bda03f8a75b0419824dee35e48311f3b12933c0da6
-
SHA512
2e89e51bf65c9e924d558f047a683a150bc54e6bd39df3c48726dcd5e75db3f3cc6c8b9fecded2ae5c934fcd7fb29b1de5e07db09d397d40947dd1bb802ca4d3
-
SSDEEP
3072:YfkCpXpfxIzbBePckWk6kVYmGmO+7GnTNSCmDILkBaWLkBWwnwb4dTvsu2qj4z+d:9yMBRRjvIxG+zMRqTjD4QL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
ST12
C2
185.172.128.33:38294
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2784-6-0x0000000000080000-0x00000000000D4000-memory.dmp
Headers
Sections