General

  • Target

    2316-7-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    bb73fc0971d527f544539cc2013670fd

  • SHA1

    b61ff87745c0cef144194aee2f125b03cf0e1ce9

  • SHA256

    0c296d018090aa4ebe3ec77ef26a2c7e7ba8adfcdce3c1f01e919230615a5451

  • SHA512

    60026dd2be38c97bc539e5c2bc29584cd6a71403dcc158f467910208f1402eb8847183227588268815bb34af1a1a062ae1030016f1677c09e0ee44282050e005

  • SSDEEP

    3072:Eqq6EgY6iRrUjsgMmwPPQhy2qmTAPtkSiihcZqf7D34:EpqY6igwPMXqmTAlkQhcZqf7DI

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

kir

C2

147.45.44.73:6282

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2316-7-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections