General

  • Target

    1208-56-0x00000000049D0000-0x0000000004A10000-memory.dmp

  • Size

    256KB

  • MD5

    5cfe51afe02f1d65897b0abac5e3e950

  • SHA1

    15dc17bca87ba88ecf26cd0b9d66ea1cf4b6ef7a

  • SHA256

    2a9e34407c315270e32d06ed172cabc50a0b02cefb85f28c453da7d4cec39794

  • SHA512

    81560340399fdbb873b4170d7fa98245a352866c0e1e8e0a1f9e22629445801e24c48d0425c9dfc4d38b1e5418fd3714b528509e0c9337d85f458881823e4bed

  • SSDEEP

    3072:p8e8hWmXIy2D58WWcgrLcLzCbqVG49IPvFXZ8e8hWJT:pwXIy2ecgPbN+sFXZbT

Score
10/10

Malware Config

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1208-56-0x00000000049D0000-0x0000000004A10000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections