General

  • Target

    2368-43-0x0000000000190000-0x00000000001E2000-memory.dmp

  • Size

    328KB

  • MD5

    0710eaae92156a5965100a018e654793

  • SHA1

    bb7fa24cdafd46b93a0e5e4464bd81e81b8d0ca4

  • SHA256

    23c404c6d9bc0ca94d885533f0c59cf1d215ca4e25e0cb22f59b6c66ecbd9086

  • SHA512

    b2ff80b1cd40c8a154d7dfb3a583ad7353304d3ff6336b47e1f743bb4fcb632bcfb76c729b917f52dd8f305d933ccd41c3cdec6947f158348185ce5e1584da95

  • SSDEEP

    3072:nq6EgY6igrUjatQcwPBILsNRf1Nx7TAitASdaAcZqf7D341eqiOLibBO1:qqY6iowP8wRf1Nx7TAeArAcZqf7DIfL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

new

C2

91.92.250.88:16964

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2368-43-0x0000000000190000-0x00000000001E2000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections