General

  • Target

    1396-56-0x00000000049B0000-0x00000000049F0000-memory.dmp

  • Size

    256KB

  • MD5

    c8bfc8cd5a8ece8c378320fabe879954

  • SHA1

    e698a15fd20c6e677d5a23ac8839af9f074ea659

  • SHA256

    1b576b76f3eba573d36ea25fffafb0c0627ba0d0e1a46f40ca950dca581ed056

  • SHA512

    b62c3a3319fb8f524afdc142e0704eda6f343058dafc7bf11515d5055e6b0736b6f94901a94fcd2dc69f599e5f71320f85049cbd2b85a3dd04ed7fb52a2676df

  • SSDEEP

    3072:V8e8hCL8L1Uo+qVAw9v4IzKi+8e8hCAIo28us8Wk2b:VZSOo+HdIzKi+U28oa

Score
10/10

Malware Config

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1396-56-0x00000000049B0000-0x00000000049F0000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections