General

  • Target

    3108-47-0x0000000000590000-0x00000000005C0000-memory.dmp

  • Size

    192KB

  • MD5

    8486e23e0d3e4cc015d651f57dbd2099

  • SHA1

    d009ac00c1b4663881b72c046f68e5ad03c765fa

  • SHA256

    3c34329de28f83afce964215426acc2223ec162542f9d936e6e5f253bdf05d5f

  • SHA512

    560d298b1aa8a9b7836e79be9ed70b238616b8ba0a45252df65b6e9609b625d550a7c95234d077cb1500d57c6426a4e5b225fe6cf1b71b336fb5f2b1106d3959

  • SSDEEP

    3072:t7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4JH8e8hh:9Kht18I0aLSDIOIylE0QXOiT4d

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3108-47-0x0000000000590000-0x00000000005C0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections