redline | 3548-258-0x00000000001E0000-0x0000000000236000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3548-258-0x00000000001E0000-0x0000000000236000-memory.dmp
Size

344KB
MD5

5593e750ca92cc0227f0e230e14718c2
SHA1

b7d2781409ce3964543a49495dd0d1c2f3f22ef9
SHA256

7cea04d3d07cdbfcda542b117169bdcda826497cf8e1736ea91277b3f4a32552
SHA512

c30be86851c21a682fc1ccba3437aafe0962325bbe1ac7c9bc542f311b1547e0ce968bf592feae51f2731603aad36690c9ba11b9b3151a024ebfb5d2b8936138
SSDEEP

6144:HxOEVtCcmqmKTCLAi5cFus2AOIYMZMBgcf0T9shXIAVqhfbrT:HcEVtCcmqmKT12iYGMj/Vq1bH

Score

10^/10

redline

Malware Config

Signatures

RedLine payload 1 IoCs

resource	yara_rule
sample	family_redline

Redline family
redline

Files

3548-258-0x00000000001E0000-0x0000000000236000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 143KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ