General

  • Target

    2664-44-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    e07c5c7c4f60b711058eadb7ddc30566

  • SHA1

    49802858bdb758ff652c5e7589c87749c55eebbe

  • SHA256

    89d2910211db9ca030e3902e853b867ffa17829a34b83284c4a10fb6a6dcb38d

  • SHA512

    de61d1f936ff6be96fb17b24d72fceb70b624d5fd21b9855c691c871a5c788faa74f784901549c0f995a0eb553484ef557140655b24144d69178c62a6aff5832

  • SSDEEP

    3072:07KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jl8e8hh:aKht18I0aLSDIOIylE0QXOiT4v

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2664-44-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections