General
-
Target
3048-62-0x0000000000010000-0x0000000000064000-memory.dmp
-
Size
336KB
-
MD5
dcd9298ce4b02d452b97ffe12de8737d
-
SHA1
e143286555c0f28fcf68c21fab9b0ed41708a33b
-
SHA256
6cf9a66f718cc27981b79fe7c42d4b9c37057665e2f8e82e5cc1477ec888f644
-
SHA512
398b254fcee93dad17e752962031fcbba0c7a81cd68e4c0a1057a12c2e120afe33085cbc1da6eeb75d85bf0cd0e52d9c397e5c7eb3ceaa645dd00e5267b10fbc
-
SSDEEP
3072:1A056RWj+L13/dOs0SMYd1C59F8gna1HxlJHdMRqfjDv/YheqiOL2bBO7:5hE1YrSMYzCPutxlfMRqfjD4jL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@PixelsCloud
C2
94.156.67.176:13781
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
3048-62-0x0000000000010000-0x0000000000064000-memory.dmp
Headers
Sections