redline | 1872-180-0x0000000000AE0000-0x0000000000B20000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1872-180-0x0000000000AE0000-0x0000000000B20000-memory.dmp
Size

256KB
MD5

2edd2ced2defbe3f9660c8bd21ef939a
SHA1

91d6665b06110a92015a95601781b901fba1934c
SHA256

096497c8cdc92aa8485410ac92cc38a3c1d623701fc5a58340adccc2f08948cf
SHA512

e8deedd0bf5f69ca14773430ac3447f23f64b50cc3f6a9f199ee57aa7dee7acf8237f56af102635825c9066b9e934d619c504069c5c83d1b7a0b16194b9cd76f
SSDEEP

6144:C6qcov2em/p6fU8YMZMBgcf0T9shXIAVqhfbou1:C6q9v7YGMj/Vq1bh1

Score

10^/10

redline

Malware Config

Signatures

RedLine payload 1 IoCs

resource	yara_rule
sample	family_redline

Redline family
redline

Files

1872-180-0x0000000000AE0000-0x0000000000B20000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ