General

  • Target

    1304-56-0x0000000001FA0000-0x0000000001FE0000-memory.dmp

  • Size

    256KB

  • MD5

    2faf621012908f19b6265a755f54f925

  • SHA1

    fae2635c36a216cf3a1508d6e7f82c3fc4bf8519

  • SHA256

    d01798efaa17eecf727281c46214a977b502b608af65122ed52d8d745f60da36

  • SHA512

    98d9958f4a4971e1ce574aec254420b29ec49b3e27099f276d0a7546f185da0ba6be846b0a18d394e92b87530990a2a30181b9030fee36905209887f55d7cf64

  • SSDEEP

    3072:w8e8hrfOdpCC8cO7qV2k2obrgOdF8e8hrPRC3YAOj8Wc2CF:w+OdpCLdVOrgOdFSCYAh2CF

Score
10/10

Malware Config

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1304-56-0x0000000001FA0000-0x0000000001FE0000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections