redline | 70316-269-0x0000000000540000-0x0000000000580000-memory[.]dmp | Triage

Sharing

General

Target

70316-269-0x0000000000540000-0x0000000000580000-memory.dmp
Size

256KB
MD5

af56ac122d834f69c8e6f5d98a8745cc
SHA1

97b32bc773fae0e82efb86f171a8e38fdcae75a9
SHA256

e39ec11b22543202abac81e5070f24de08b244b40090c218c0d6775eeb829570
SHA512

35718ed345caf1c4c630cede235c04eb82779a2eee861dd277eb1642f59b768f130c1d0037155f359a42b63335aad2d2894f67dcfdc765f95e740b7a21cc350f
SSDEEP

6144:ZaZYswY38e4bD6f2YMZMBgcf0T9shXIAVqhfb2C1:ZaZYswY3+YGMj/Vq1b71

Score

10^/10

redline

Malware Config

Signatures

RedLine payload 1 IoCs

resource	yara_rule
sample	family_redline

Redline family
redline

Files

70316-269-0x0000000000540000-0x0000000000580000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ