General
-
Target
2852-3262-0x00000000005A0000-0x00000000005F4000-memory.dmp
-
Size
336KB
-
MD5
d46691a13f88a6d1c47b7af3fcf8826a
-
SHA1
601e98aa8f3c7eaf36f2a5cb9ce9db35ffab7e31
-
SHA256
11b751fc57c30df2c28b0fe181c843e43cfc6233a3b3793afd554485e533a322
-
SHA512
4f47d2cf2a9a97181b92b065afc7589f13208b1f3c99d99b375c6679dd45eaa7881c76cd3ca72a4d4f2cb125a5a0ef74874426ed5bf4900ee87769b49687bb84
-
SSDEEP
3072:qfkCpXpfxIzbBePckWk6kVYmGmO+7GnTNSCmDILkBaWLkBWwnwb4dTvsu2qj4z+n:vyMBRRjvIxG+zMRqTjD4SL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
ST12
C2
185.172.128.33:38294
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2852-3262-0x00000000005A0000-0x00000000005F4000-memory.dmp
Headers
Sections