General

  • Target

    296-330-0x0000000000400000-0x0000000000454000-memory.dmp

  • Size

    336KB

  • MD5

    02c9d08eeda7b36556652ebdaee033c8

  • SHA1

    25ab5ff996f5a4a91ba729a9d57553e1e3f82bca

  • SHA256

    ccae22b450bf1c99df527344775681e542ff8f2c3e2027d906fbedb6a4b5ac3b

  • SHA512

    12471cc7d47d63704be793284b17824f43c4084e67a28d0553740e2e1431dc567bcea27a3e4965ea371afac341c48faf083985ad0b514f899be7e3ce7bff1716

  • SSDEEP

    3072:7A0VmZhF+Kt5ZKRPFuDt9dV8KqnApxAwB7IMRqfjDv/YEeqiOL2bBOf:vurtqFI3l/xAaIMRqfjD4qL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

LiveTraffic

C2

20.113.35.45:38357

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 296-330-0x0000000000400000-0x0000000000454000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections