General
-
Target
808-109-0x0000000000400000-0x0000000000450000-memory.dmp
-
Size
320KB
-
MD5
ec17724bab3acb60730aab70736f3633
-
SHA1
89a4f1aed4dba039d877648911db73a16d213283
-
SHA256
c6b79104ced576957657b746365ff7b08b55b6ec39e7d07e25863a745bc02650
-
SHA512
50bd6b0a1d83ecb308e3face7c2c45e460783bdc1aa6b84f38c113daf9c489e2383e8f4c8f2187740d037bc8bdb64230d187f27263613998bf1890e734ccc17d
-
SSDEEP
3072:FqFFrqwIOGHryh6m2zH/YRR7z0QLZk0hdyfkTZX+HIjcZqf7D341eqiOLCbBOd:MBIOGXkFdRTZOWcZqf7DIfL
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
LiveTraffic
C2
20.52.165.210:39030
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
808-109-0x0000000000400000-0x0000000000450000-memory.dmp
Headers
Sections