redline | 4516-295-0x0000000000AE0000-0x0000000000B20000-memory[.]dmp | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4516-295-0x0000000000AE0000-0x0000000000B20000-memory.dmp
Size

256KB
MD5

4d3fe4979cd5d790f7de8c22a7f38da2
SHA1

ae6a88b434f170973dec99a1380d465d71f15b8a
SHA256

fb482459f4632797d4dc2b73a450cb1d780abcd358b2356300140a73f2a2d6a5
SHA512

55ee83d2896217468f784a9a7787d2b3b737dad8d9bcf63a0cfbcd7fb00f6b8d55c0655a4b2c7401e25b21c80f4803c3d31466b8f75dd1de71688866aecbc56f
SSDEEP

6144:j6qcov2em/p6fGWYMZMBgcf0T9shXIAVqhfbo/1:j6q9v3YGMj/Vq1bs1

Score

10^/10

redline

Malware Config

Signatures

RedLine payload 1 IoCs

resource	yara_rule
sample	family_redline

Redline family
redline

Files

4516-295-0x0000000000AE0000-0x0000000000B20000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 141KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ