General
-
Target
1304-105-0x00000000000A0000-0x00000000000D0000-memory.dmp
-
Size
192KB
-
MD5
3053ffc83c9730a752adfd246da21023
-
SHA1
0e60afd06a8de05170731200a6a711ebd79e4616
-
SHA256
190110d2ce9fb244b25c9d938a8a4f59c21f184c1733f8c941333210ade4d9f0
-
SHA512
6ef2dca4663a2b4aad8b9574de18a11e923bb3ce47bb194550932b88535117b08cb7f4c096ede6b6a7fe08629f761bea8d2373b966936e6e1f426f115d3a5baa
-
SSDEEP
1536:WAsRuqlVZRGWT8/ri4dspuqf0JrNmBbuYJ0Bfer7TGqVMbuwYjKGbBHo83wYkC8c:WtR/t/0NSkerGqVEwOGbBHos8e8h2
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
Care4Art
C2
103.173.229.190:18740
Attributes
-
auth_value
408beb72854e990ab48656f3d1d0ac13
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1304-105-0x00000000000A0000-0x00000000000D0000-memory.dmp
Headers
Sections