General
-
Target
1808-61-0x0000000000400000-0x0000000000452000-memory.dmp
-
Size
328KB
-
MD5
3ec950f676a6caeaad67e454731e6b87
-
SHA1
48778221f7aaecebb0829fa2effbb3e901700b5f
-
SHA256
01644979cc04dc066ae34f6a279d4a3145621b17eada94ec7e88a1441b701b78
-
SHA512
92a66c622414200a612cf50c6027794613bbd81c79e3aab57782f30865d3b93861b99ecb2834a589301811edcc5048fd263e13b5f520e90e766403ddbd748026
-
SSDEEP
3072:yq6EgY6igrUjXwwRwPf/Bvf1OxCfyJTAStA7KoZcZqf7D341eqiOLibBOx:BqY6i7wPxX1OMaJTAOA7ZcZqf7DIfL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
33
C2
194.36.178.33:47454
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1808-61-0x0000000000400000-0x0000000000452000-memory.dmp
Headers
Sections