General

  • Target

    2836-45-0x00000000000D0000-0x0000000000122000-memory.dmp

  • Size

    328KB

  • MD5

    448768aefbcbe0cd1f13125279568065

  • SHA1

    cdac2ab7645e7147ee84a589462a9e8f62769612

  • SHA256

    82aa606282d9acdc897eb6a80b50326a90e1a3abcef87e441f4b34e73bec1028

  • SHA512

    cdba3b40c86e9af8febb75b2b20bf195cad53df6abeaaa4270dc621c97eb8cb02f7f4d350c06c261c8e1a6bea83a1331963f21e7d2835820b92a97b87860fdf3

  • SSDEEP

    3072:Bq6EgY6igrUjXwwRwPfsGZdkfD13TPCtASKNAcZqf7D349eqiOLibBOL:gqY6i7wPvZ2fR3TP+AvAcZqf7DIHL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

new

C2

91.92.249.182:34419

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2836-45-0x00000000000D0000-0x0000000000122000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections