General

  • Target

    2660-45-0x00000000003C0000-0x00000000003F0000-memory.dmp

  • Size

    192KB

  • MD5

    a6f37359e73ddbfabdd9319330332454

  • SHA1

    55bd7e55b72f43a4c1e553f412f88a06bdd2acbf

  • SHA256

    007434408aae1fb9906f080da6b3c94f0a7629dfacab985d5718f54f9fd38b0b

  • SHA512

    fb4583f0290bb7b3f38bfc6462689780d973a3fa9b9af628283daa33b5609499ee62a54552b81f13f6b50417a5facb83d5aaf6c090255a268a25ddc6281ea982

  • SSDEEP

    3072:u7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jg8e8hh:gKht18I0aLSDIOIylE0QXOiT4u

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2660-45-0x00000000003C0000-0x00000000003F0000-memory.dmp
    .exe windows x86


    Headers

    Sections