General
-
Target
1964-382-0x00000000003F0000-0x0000000000442000-memory.dmp
-
Size
328KB
-
MD5
c3a5bb979188c6fb2e14ceefbfc3ba39
-
SHA1
aea381ad2ad0e01f11729e3ca3134f9a95b8cccf
-
SHA256
76b594805ecd21042f8a46a53fd46b85735b30c1d0a9978e827a1ccc08f89fd3
-
SHA512
400ff829a417cbcb8f19643e7e72214ffe4478981faef5b0dcd92e80c0baff009e51c92a8cc0a97fef7400cdedb800cd212b9d29d2b6f4de07e626fcbd6d28ae
-
SSDEEP
3072:9cZqf7D34kp/0+mAYkygYdQ0ghnB1fA0PuTVAtkxzF3RneqiOL2bBOA:9cZqf7DIcnGapB1fA0GTV8kr/L
Score
10/10
Malware Config
Extracted
Family
redline
Botnet
fvcxcx
C2
185.81.68.147:1912
Signatures
-
RedLine payload 1 IoCs
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
1964-382-0x00000000003F0000-0x0000000000442000-memory.dmp
Headers
Sections