General

  • Target

    2692-28-0x00000000006D0000-0x0000000000700000-memory.dmp

  • Size

    192KB

  • MD5

    0869103bd6e176f4b21193bd291263f1

  • SHA1

    65c4f27e73c086cf0f447dc9d0d1f1b8d34a233e

  • SHA256

    1c510d84019875d7278c5544f1d84a11cc7ab81be02127d3e7515382267eff50

  • SHA512

    601f95d5a148eeeb9c0e30fa26089305e8a851de2f064400d919a839d01822a7277886b9594987d4d7758a28e9b32d75aa4cca05ee0421dc63e77280a6badda4

  • SSDEEP

    3072:o7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jb8e8hh:mKht18I0aLSDIOIylE0QXOiT4x

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2692-28-0x00000000006D0000-0x0000000000700000-memory.dmp
    .exe windows x86


    Headers

    Sections