General

  • Target

    2784-62-0x00000000002C0000-0x0000000000312000-memory.dmp

  • Size

    328KB

  • MD5

    aa0e3a251d9d57d4153674ad9ff9f034

  • SHA1

    1a059b6e8952623d74ed9d2a554d1df698388811

  • SHA256

    429304d166112a43dc22e777630d2bfec530fe1dc4b2677fe7a6089e5c6b304c

  • SHA512

    03404ebe299c56ef8c1200dd15f73a04dacf80b1791cec65e271545a82b413cb0b1406291ed0f79aa1af600c48f21207d31cf4cfcb51fbbb20fc57943a1e093b

  • SSDEEP

    3072:9q6EgY6igrUjXwwRwPfhlogDHGjZyTAZtAsiL5cZqf7D34leqiOLibBOO:UqY6i7wPnpiZyTAfAP5cZqf7DIvL

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

1

C2

185.215.113.67:40960

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2784-62-0x00000000002C0000-0x0000000000312000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections