General

  • Target

    2908-45-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    1bc6a484577cb456f44899198d8dc995

  • SHA1

    2f81da3f3418cbc63c66e0aca3361b8466e5cffb

  • SHA256

    3f71d21024cd608c9c6f6a82ea843f7c452ff7d75ff923400ad916ed8de42104

  • SHA512

    95910572e7f05ee834d7a70bf5e9677705302bcc64595abe2e434bec58fd237173b9bf03dd655aa0cd71e7e44f242b0eba88a5229f25bd9f545f079d406a189a

  • SSDEEP

    3072:i7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jl8e8hh:sKht18I0aLSDIOIylE0QXOiT4v

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2908-45-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows x86


    Headers

    Sections