General

  • Target

    1772-97-0x0000000000440000-0x0000000000470000-memory.dmp

  • Size

    192KB

  • MD5

    bb42f3e5db9cfd217ce83d42efb0af1b

  • SHA1

    b2029a57ae4011492a370c4db31582ced981dc0d

  • SHA256

    bd0a0142af57f90e4100c9fa038aa9646c2f701b6b1314321e4a22a4747780d7

  • SHA512

    03acaeae5e6a7eb7030962a8dbedbce498f05b49df25c46370cd8dbb71c5cb2d93e2e11cedf1d018458bb81a53f349e2455d8c93308e0d9c3c6b1c9befc2525d

  • SSDEEP

    3072:zN9zgaHeuGhriktrBxN3kuZ+zdzJ8e8hj:J9Ie4rhTodzJ

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

furod

C2

77.91.68.70:19073

Attributes
  • auth_value

    d2386245fe11799b28b4521492a5879d

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1772-97-0x0000000000440000-0x0000000000470000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections