General

  • Target

    1976-59-0x0000000000400000-0x0000000000428000-memory.dmp

  • Size

    160KB

  • MD5

    c21af1977c7ee9d2a75966f1e2e981c4

  • SHA1

    a595d914b7ed287efbc8b2d8099f1a72a795a898

  • SHA256

    dc9cbf82386b681f395e45c136a6926e91f9a1884bff18faada804ee26aab747

  • SHA512

    efd3c9f5c9a380b4063bb3c5989b1ea7e5fd4b97279140ceb441574bbebdfa03e6ce7cb5bba42d70d8a7ba673548f7b331ea118759a1fa091e0685d3951a8a5f

  • SSDEEP

    3072:VYO/ZMTFd5sIg7svGnpoNuVbPDFbyJPUhISS:VYMZMBd5sITenpoNe4xUh

Score
10/10

Malware Config

Extracted

Family

redline

C2

162.55.165.128:44351

Attributes
  • auth_value

    9bf806ca8cacea2922eb02ed6c42029a

Signatures

  • RedLine payload 1 IoCs
  • Redline family

Files

  • 1976-59-0x0000000000400000-0x0000000000428000-memory.dmp
    .exe windows x86


    Headers

    Sections