General
-
Target
2452-34-0x00000000001D0000-0x0000000000220000-memory.dmp
-
Size
320KB
-
MD5
fbe7c8afdb972d270899dfc18ae2ce1d
-
SHA1
a8438d31172fa170cf2cf32091e2753a8dd3149d
-
SHA256
c683bf831a2ea0a3c1a3bc4ad0c161ebbb9f92a3ede0a3f1ea12ebe4c3a8b133
-
SHA512
7ac76f753a9e7c68c1202a51f89aa17711270e73f743be34af016d8c6dd4972c091e4e7f3dccef792eebd5f82c7def16796b133dd5d1d5c3fd025e32ebef3a4c
-
SSDEEP
3072:0Zq8+MBKWUbiYjZfQgUDoGHRx43WwzZ2D1zUcZqf7D34leqiOLCbBOl:0ohMBKWU1H2z4GwzZUCcZqf7DIvL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
muter
C2
85.159.228.138:41572
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2452-34-0x00000000001D0000-0x0000000000220000-memory.dmp
Headers
Sections