General

  • Target

    1340-97-0x0000000000280000-0x00000000002B0000-memory.dmp

  • Size

    192KB

  • MD5

    b8bc30b61d5e8f1b35b09925bf33041b

  • SHA1

    ce521ae6b97aaf7ea624310d0f0ebc96f2d5017b

  • SHA256

    e4348719563bae64e832b599387a9cd54671855b02655c5a0a8b7a63c4e38010

  • SHA512

    f7732e1bd4b4088ec28d4b70be34107c66c7c728d1832e616af359efa6e09421c36230e8bfa009411058c1d6ea8f093b250031188652dca40cc44c63160437dc

  • SSDEEP

    3072:73sCziRmKPvwL/2rSlllF+HxN6AtjJXOg8e8hB:73HqXwaWlllF+CMXOg

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

smoke

C2

83.97.73.131:19071

Attributes
  • auth_value

    aaa47198b84c95fcce9397339e8af9d4

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1340-97-0x0000000000280000-0x00000000002B0000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections