General

  • Target

    888-56-0x0000000000AA0000-0x0000000000AE0000-memory.dmp

  • Size

    256KB

  • MD5

    20f416d5fdf8593ff0c3c4f88d2adf76

  • SHA1

    c181ea670a0b39d1bd9c65afeaab80d27db49bcd

  • SHA256

    0652498c725f6dcf2caf801d661918d3e392103d084094028ed61736d221a1cc

  • SHA512

    6e621ce01fc4c42db7abbf668a1a48046903c3196a1edd81ec55de43f58a9741fa277cd522b2d4c910879a76cab381bc42111bebb5ee66518a226250ac380ebf

  • SSDEEP

    3072:y8e8hZJ6RbAxNjgOqFra6l98e8hZuvY6gJBOc:yi+oara6l9Je9

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 888-56-0x0000000000AA0000-0x0000000000AE0000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections