General
-
Target
2644-146-0x0000000000400000-0x0000000000454000-memory.dmp
-
Size
336KB
-
MD5
00c40f164066f028072f326f299d1639
-
SHA1
59cddb06610a2e0ff9dd907a9fb9a26fc797e45c
-
SHA256
17c68fd2c1a379080299024f262f730329f92077ecdcbd2d5ff45de13d2bd6bf
-
SHA512
d77cfaa28366f206882ffbf315bb24f02d9abd517cea1fffa87955957cdab995d837a5f3a4638ce345e84373e95e410192f0ec020195a3782eb3e290e0f7223a
-
SSDEEP
3072:3A0xOp+R+vdVR2LsbfbujzJ8KDmnDgbxd9ITpMRqfjDv/YUeqiOL2bBON:r9idiLsbfS5Dowxr6MRqfjD4aL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
LiveTraffic
C2
20.79.30.95:33223
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2644-146-0x0000000000400000-0x0000000000454000-memory.dmp
Headers
Sections