General

  • Target

    2080-0-0x0000000000270000-0x00000000002A0000-memory.dmp

  • Size

    192KB

  • MD5

    8feb9ab1e5a3032a71363f60f91d3e12

  • SHA1

    49f4f1caaadbb62434b9ce972cb105cb4ae007a8

  • SHA256

    f02967cfbba355ddf91b22d9f4fca135bccb5bf83e2769ddf42f125498e01769

  • SHA512

    9d2a51848dee2690557b76f2ef037bc5dd19e17bc31ed97573c24f144063ffbdacc8e05902dcc9d87fc11c134974ed67f122c26480861dab37bd09de311cae27

  • SSDEEP

    3072:l7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jp8e8hh:lKht18I0aLSDIOIylE0QXOiT4T

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2080-0-0x0000000000270000-0x00000000002A0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections