General

  • Target

    2368-33-0x0000000000590000-0x00000000005C0000-memory.dmp

  • Size

    192KB

  • MD5

    afb80153114a46d85d2cacf1f344c164

  • SHA1

    4f901adc462291db5bab2eecfa2f5285babfef5e

  • SHA256

    08d80e344cef6a9d27bae79bbf9f6e936ea2d6107ab394ee2d7e3f31e8e43e99

  • SHA512

    d9ed20e3bb9066a7860f42d9ff593a4160d8c6e84743e96d99c0a4b3b55484890eda15a156c411d42666ae816ef520db84ba7b29fefad73d580e096ad99c8827

  • SSDEEP

    3072:37KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4JH8e8hh:rKht18I0aLSDIOIylE0QXOiT4d

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2368-33-0x0000000000590000-0x00000000005C0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections