General
-
Target
4556-8-0x0000000000400000-0x0000000000450000-memory.dmp
-
Size
320KB
-
MD5
a7273c9cb0a99349e05dd034cbd7a35d
-
SHA1
3dc8c251d634a40de8a67ed02f962aacc6e8f612
-
SHA256
dfb8e559e8dbd4c418dad0637f340fea738082f4b10b36f45b9ffa1292ba604d
-
SHA512
c750f7b5debd945f6b8b89beb9f245bff66dac00f371a06f95e448c1e61e37b19c5fa8e6aeacc64bb9339b64f56e042df22686f0124c0ba0ac58ed31fd6ddb1d
-
SSDEEP
3072:RqFFrqwIOGrly7lOSLiGOP8CE/JWW4I/J/Rfhd7KTZSfHgrcZqf7D34deqiOLCbM:wBIOGkuz8GcdmTZM+cZqf7DInL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
@skayoker38
C2
94.228.166.68:80
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
4556-8-0x0000000000400000-0x0000000000450000-memory.dmp
Headers
Sections