General

  • Target

    2344-54-0x00000000002A0000-0x00000000002C6000-memory.dmp

  • Size

    152KB

  • MD5

    5b8adee35e1ad8079c21e59a0bf083e2

  • SHA1

    1314991a9725c12384e162150e6d4ecb4fd9b49a

  • SHA256

    f02de93ab0ba427d7134b7b45941c3fb976a7972377aa4865073b0b967d97624

  • SHA512

    f112fffb5e3a223ac4bceb1ad92d2a309bcca2d0de8e594875446875e83482f0ee3aa49e0ecdfcd8a3f7f831098a6c9942cc0c63ad92a93dc403a111b03cf77e

  • SSDEEP

    1536:4a2cnVHT1C/oTkJwY+fHqJHEIa8t08tcBkGchPjQQbV7x/znQosYgibfbFDKsR9:92cZZ4qf6EH8X6UkgHLgYgafJl9

Score
10/10

Malware Config

Extracted

Family

redline

C2

185.157.120.4:17355

Attributes
  • auth_value

    d3a4cefe2fe72d08728081e35dabf342

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2344-54-0x00000000002A0000-0x00000000002C6000-memory.dmp
    .exe windows x86


    Headers

    Sections