General

  • Target

    2900-36-0x0000000000260000-0x0000000000290000-memory.dmp

  • Size

    192KB

  • MD5

    2336b102276f96887e877a68731c29ae

  • SHA1

    6e5484df55df5e000862f9fae3074755405d305b

  • SHA256

    254226d5ee297954a31363d4791480a36486af2463788d43ee84fe5c39a8bf9a

  • SHA512

    327069e7290f7619dca54b1fb8bdebddf189ac3566d85d3db0f39f1992559fe3227fab1282d575530f1b9a89f5a4f8c7d2177175937de3abc3b9e0c4e58d75f4

  • SSDEEP

    3072:+7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4JW8e8hh:QKht18I0aLSDIOIylE0QXOiT4I

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2900-36-0x0000000000260000-0x0000000000290000-memory.dmp
    .exe windows x86


    Headers

    Sections