General
-
Target
2516-8-0x0000000000400000-0x0000000000454000-memory.dmp
-
Size
336KB
-
MD5
d7f95692851a12b8318848d069cb2f0b
-
SHA1
19d652db1b8e6d20b5cbfef0511ea2c4675d3675
-
SHA256
d628d708f4faab80bde389090480a1384d99f29f99bbd73bf1f0ac84b04f9438
-
SHA512
326025c880fca171b63fa5b6ccfb168bca2bd0885c01c88bcc16dbd8cd80ffa26e5fcb7d6d636b664c7337f8707011dd3c6d8476eb7600b127cfd34eac3a0694
-
SSDEEP
3072:mrw8ZXnFOS5WMk1nk+khyUVFgFUjVgNuTWQ0WQBHMktBHMw5T5lHW3opmBZBYd0/:gmv/rTsWIcJGuxmFd2MRqT6D4UL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@MasterPhill777
C2
45.15.156.167:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2516-8-0x0000000000400000-0x0000000000454000-memory.dmp
Headers
Sections