General

  • Target

    2352-0-0x0000000000220000-0x000000000025E000-memory.dmp

  • Size

    248KB

  • MD5

    cdde082b89df753d35711d3614408732

  • SHA1

    800c8288824cc76f9d0a4bfac457f05fb307bdd9

  • SHA256

    8dc5d45ea97c38bc4cbd47146f0450f08d7f3be3b709f35df28b489c8f975931

  • SHA512

    f678cf429332567cf3ae5428c5dbeed0c05cbfbfc56f1e1f72fdd1ef994e9f20315de0f9abd3417a32e583e113282686d69b30691b35887e48700ad9aa8bceac

  • SSDEEP

    3072:M8QAK7nNgc5O1Rr+s01y8EvEF7RSd+m1SXqe0rtF6KSa:M8vK7nNgc5Sr+s01iEt04m1S6DrtFl

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

@hersgorid

C2

45.15.156.167:80

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2352-0-0x0000000000220000-0x000000000025E000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections