General

  • Target

    1088-54-0x0000000000220000-0x000000000024A000-memory.dmp

  • Size

    168KB

  • MD5

    c889df848d05dcf49d3b07660061a81a

  • SHA1

    96598b5356f776798de4bf28a3a8523d6a7fa83f

  • SHA256

    3f4bb86d2f90e2f07d0f9751da37cd67020d419e5a0cff67a9220c673e1ee8b7

  • SHA512

    ab75dae543bc47d563150f03ff5a46d56b4bd8948feb3d73eb6d1adaf80a18438ce59371b978d146f2fe60f8720b96e8040e043cbc1d3c93e858ac8176a1d7a8

  • SSDEEP

    3072:6V+m5cRQmRSZ8scjhME98XRh6Zb8e8hH:6jUBWRh6x

Score
10/10

Malware Config

Extracted

Family

redline

C2

45.15.156.170:43588

Attributes
  • auth_value

    36e686a8e656af155d023649076d8e15

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1088-54-0x0000000000220000-0x000000000024A000-memory.dmp
    .exe windows x86


    Headers

    Sections