General

  • Target

    2224-119-0x00000000009C0000-0x0000000000A12000-memory.dmp

  • Size

    328KB

  • MD5

    642924f3e88ecca85471c11f53a8c46b

  • SHA1

    c611942ad6bc5362fc9d0e7be0655607bb43cd53

  • SHA256

    b0d2b7244e858ed5f49875985c4a8f16033683a4141609458bf09f72f6bba6cc

  • SHA512

    6298d1f1d14367f7fc7d29bc3acb693b9ee2edc838764e62be69a16e1410e403d55d520c8d1f6c6caf385abc714ddd9f5df02882cf5a1ff1621d698e9a45fe82

  • SSDEEP

    3072:g29LP/YAQlW30GLsmAwNr12pGuhTMo1syKXFWnO3TRGfx01h7AykPMRqT6Dv/YO5:12dmA42gST981BcxKBA9PMRqT6D4kL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

2024

C2

195.20.16.103:20440

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2224-119-0x00000000009C0000-0x0000000000A12000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections