General

  • Target

    1516-55-0x0000000000400000-0x0000000000430000-memory.dmp

  • Size

    192KB

  • MD5

    5b40e957eb1d4ba251d5f03d24e0a8a5

  • SHA1

    cb932abcc6d502af4dba41565a4d0cb6e3bd1586

  • SHA256

    392e5e9acf43db6004d0090c9187d56789c114ca3ba5f97cd10c97d0e629f08b

  • SHA512

    1cce7a5f5d584e0f3d790994696de1787d653161fd1d52b8a6b096017d7d5a7cd6d455018094f3e03dc3d94f5d15a69a9955fc1cfa4108eeba3f778521ce0da6

  • SSDEEP

    1536:S0HM+E/qhVZCGWZlwP/t8WG6MiC6YdWjkTGqVOFWbuQ/xzuXheajc84wYkW8e8hH:+5Jq8WG6qdWjNqVOshoXheajcj8e8hH

Score
10/10

Malware Config

Extracted

Family

redline

C2

94.142.138.147:48665

Attributes
  • auth_value

    4f45b8cbb98e99cbc97d3be68a47d22b

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1516-55-0x0000000000400000-0x0000000000430000-memory.dmp
    .exe windows x86


    Headers

    Sections