General

  • Target

    1212-56-0x0000000000D60000-0x0000000000DA0000-memory.dmp

  • Size

    256KB

  • MD5

    4946fd2f7fba4232be3276611de76531

  • SHA1

    789caa8e26612e3e5c0d94c25cd0d4ec17c3ee68

  • SHA256

    a5b5014f6271a91019d6faef87b8efacc8a93991a13a2890d532f33dafa847c3

  • SHA512

    17a9031c002eaedfbcfb749909829b0d58724c1b62beada9eb32ae97998b2c9be6527cdaf3a1170ab82af2d56d6aa6d30488b0d8d9302eb4229eed5e311ebb50

  • SSDEEP

    3072:y8e8hZJ6RbAxNjgOqFra6ls8e8hZddP6gJBOc:yi+oara6ls6dn9

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1212-56-0x0000000000D60000-0x0000000000DA0000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections