General

  • Target

    1220-56-0x0000000004990000-0x00000000049D0000-memory.dmp

  • Size

    256KB

  • MD5

    5e6c7077023421c192dbe523bf92580b

  • SHA1

    989897ce42384c2c655d164b8cf3d9a7a57fdbeb

  • SHA256

    eb998ec16277c5c8ea4839aa87d9680c0f26587bca0e8393be95eff016da6c37

  • SHA512

    b5670db80f5b7e956b843908f5508c54d444213b136ac6b54577ddc7a55f556dc2c9c63202a657c853800e9792f9dc39df035093c66f4274af7a2ada9f3d2d46

  • SSDEEP

    3072:Z8e8hRnhT7qVAg5o6Yoa7h88e8hRkK0spN8WbC:ZuhHPL9oa7h8zKfC

Score
10/10

Malware Config

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1220-56-0x0000000004990000-0x00000000049D0000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections