General

  • Target

    1396-56-0x0000000004900000-0x0000000004940000-memory.dmp

  • Size

    256KB

  • MD5

    9fe704b175d6ca03a527f29be2c84e6f

  • SHA1

    923467f67457f7f95a1e88c24e3bba7342e562c2

  • SHA256

    0ffbdfb5ac73d8f9359e0512a4cac13b0d5eae6ada4f55492cefa75b1d132282

  • SHA512

    d835abb60c580e4989f57ab361bad7a63a79978054b2fb9e21c4c6d88e19299e89267ed92426f7310288858f08b9a8773c064e9bed3ffbd5cd96d6a241f24d22

  • SSDEEP

    3072:+Dd8e8hVUVQ+RwM+IB+SaDtsA4+rSzPDd8e8h0E8S4s69gQu2lr:4sUhtcSMtsAS1nS4s6Plr

Score
10/10

Malware Config

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1396-56-0x0000000004900000-0x0000000004940000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections