General

  • Target

    1972-54-0x0000000000220000-0x0000000000250000-memory.dmp

  • Size

    192KB

  • MD5

    97998c18a8d4102b26a93d8fa5a0db92

  • SHA1

    386c9b7de5fd36677922ff867dc0e3e5d8b29cac

  • SHA256

    753d2282cbf7bbed869bd6c59f85f2a0647883477a8a2cd519428acf66b03e40

  • SHA512

    2b3c1b7057d0947e814201ca8f9ce76590bb7954c556f3f2999a1c1fbf7d335fbf69574cebcf747a34add4a1a77d888822f43b0a0afb0de319f7d0eef449bbe6

  • SSDEEP

    1536:pO0HMRE/qhVZCGWZlwP/t8Wz6MiC6YdWjkTGqVOFWbuQ/xzuXheajK84wYko8e8l:AyJq8Wz6qdWjNqVOshoXheajK58e8hH

Score
10/10

Malware Config

Extracted

Family

redline

C2

94.142.138.147:48665

Attributes
  • auth_value

    61c7e7daa53be66be1b3399651a8aedc

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1972-54-0x0000000000220000-0x0000000000250000-memory.dmp
    .exe windows x86


    Headers

    Sections