General

  • Target

    1604-56-0x0000000002320000-0x0000000002356000-memory.dmp

  • Size

    216KB

  • MD5

    eafe7cc8a0c02c6c04a50ffba25fc9bf

  • SHA1

    88daf39effe8b49f3e27193b2417d38b7ce4ede6

  • SHA256

    6f69e6b54ed1af1e8de45627fb5a95583334c38a12aba736754a32abf0a9ff1a

  • SHA512

    9400f7f5e666587cb65ea08f0b8e2674b703310cd6774af61f1bd78ad63d97bbf3b25fb4325c2d0fd8a70015c6bd3d58b7a2f53f35966a47f89dd777ff53bd4e

  • SSDEEP

    3072:KczPLRuCkCBrrAuHOOxaCEflJhL+4FBKf8X3iL8e8hil:bPLRwCw+EflJh+1kX3iL

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1604-56-0x0000000002320000-0x0000000002356000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections