General
-
Target
700-326-0x00000000002B0000-0x0000000000304000-memory.dmp
-
Size
336KB
-
MD5
320231f69cad17bfa3ab81f641711476
-
SHA1
bf29e7f20959a284d83fc90121e99efac6158fbb
-
SHA256
945879ec14d3f55d58bbbad11bb4da12da8eddd86633029ff882cf4619cd8502
-
SHA512
dcea14867d7e35a16e84e00fc0a23549e712f1db974ca86e8cd48bf3d534e2ea5f5e66e5ec52cffb5ed3edd068243525a4fae685fbc1691c62f05b8c0b2a0476
-
SSDEEP
3072:MA0/mZGN+KNxIKRPFuDt9dV8HvnqvCi6VxsFRbMRqfjDv/YPeqiOL2bBOT:kbDNlFI3au6VxsbMRqfjD4xL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@PixelsCloud
C2
94.156.67.230:13781
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
700-326-0x00000000002B0000-0x0000000000304000-memory.dmp
Headers
Sections