General

  • Target

    1588-127-0x0000000004A80000-0x0000000004AC0000-memory.dmp

  • Size

    256KB

  • MD5

    6434e7e63ce5ac732dd7328adc6e102a

  • SHA1

    ba0f0b1678b0604f381a5ba94d8bf2d70b3bb7bb

  • SHA256

    dfd3dbafdb1799b82584442f993c40d002444a844af99c3e33f0d8231148d2fe

  • SHA512

    d11858459c08d83edcc89a6adf5347885830bc662311ff1134b8bbbc20da3ce7a1510f861edd4cbacd35f9a9673cbf1c27e2407d0e91e9e41f94b782b1828016

  • SSDEEP

    3072:U5bSQxA68EV5bSQxA6IldyYxN3KVaxLzzUY472M8e8h9:iAREFAlW8TLzzUY472M

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1588-127-0x0000000004A80000-0x0000000004AC0000-memory.dmp
    .dll windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections