redline | 2392-183-0x0000000001250000-0x0000000001308000-memory[.]dmp | Triage

Sharing

General

Target

2392-183-0x0000000001250000-0x0000000001308000-memory.dmp
Size

736KB
MD5

8ff9ae92c9bcccb99316412e0c8d1e9b
SHA1

5d657ba84bdafdc9d3fba15ff694178b6b1196b5
SHA256

aab4544bf98e8600b97971807deb637dd99739cc40407ea730cfd29bb36d9bcc
SHA512

c32fb4cd41c211f3806a9e84ebbea8b4e3552fab51d5da2e08ce04d3863b3b4b20f4d35808f03c645a7025704971fe0fa593ba42fb7273832f10e4808ea633ad
SSDEEP

12288:Bb3aqVVSgifYABtMdDXvsjQEizWrVc5OR0Nt6YuYuKqzx1mYGM87+jYbypF:Bb3a+VSgifYKqEiqrS5ORI0AYG1Fbyz

Score

10^/10

redline

Malware Config

Signatures

RedLine payload 1 IoCs

resource	yara_rule
sample	family_redline

Redline family
redline

Files

2392-183-0x0000000001250000-0x0000000001308000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 471KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ