General

  • Target

    2660-50-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    2a0b5b41258254d54382825735bc2724

  • SHA1

    7daf74125ee23d8464cb223c0ce871ecf14250dc

  • SHA256

    44581319644880eaf0c6106f54a0149f892e20c4654fcf78c5ef2f2f7d201778

  • SHA512

    7eb2a9d47abc5bdd33dbd9f7e9b9a679e6792a2fa2fe83ada35b62ae6cb9db6ca67e61db3f23a170aed98dfac1d01819650fdea01b73a623e22b08d6f156bfb5

  • SSDEEP

    3072:G7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jl8e8hh:IKht18I0aLSDIOIylE0QXOiT4v

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2660-50-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows x86


    Headers

    Sections