General

  • Target

    2796-45-0x00000000001D0000-0x0000000000200000-memory.dmp

  • Size

    192KB

  • MD5

    5d4fabb5cf60bdda32608dc19d159838

  • SHA1

    42ada76370a3824b292b0dbdf92104df47be1698

  • SHA256

    1bc6cb8aa353abe7fcc43d3883902a813140b2dce19ea5cdfc830e6838ecd0b1

  • SHA512

    253cbcf2d28e6cbd38cbf292eebf621720e13f6d3764dd105ef3a7345ac43a4d727b3345585c7e2ed511b064dae0afb5dd1aaf17d67ef5e54ac175f295863d04

  • SSDEEP

    3072:p7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4JL8e8hh:xKht18I0aLSDIOIylE0QXOiT4B

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2796-45-0x00000000001D0000-0x0000000000200000-memory.dmp
    .exe windows x86


    Headers

    Sections