General

  • Target

    360-113-0x0000000000260000-0x0000000000290000-memory.dmp

  • Size

    192KB

  • MD5

    484501f3c00bfdee26ec31c300050ec8

  • SHA1

    127527934dcf1d99b19d992f9ab6a9422864174d

  • SHA256

    dcf68e719b7dfef7c1ae81176a8f72cee6cb4a3704aec0ea56420240f995c5b9

  • SHA512

    fb4b4d454d79894ae1697f64094ca58e02c37582b947ab1c093fdb42979bebaefdd7ba0966d4095b4ef06781fd1ec45ba10b3b3c53a196f8e3266d1ef49e197b

  • SSDEEP

    3072:rUUEa9Te3JQBf8td3/oxN1ULH0tyt8e8h4:I7QRyi1tyt

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

mucha

C2

83.97.73.131:19071

Attributes
  • auth_value

    5d76e123341992ecf110010eb89456f0

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 360-113-0x0000000000260000-0x0000000000290000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections