General

  • Target

    2468-47-0x00000000002D0000-0x0000000000300000-memory.dmp

  • Size

    192KB

  • MD5

    3f2b0c2578f5cbaceabc7fb895a7bdc8

  • SHA1

    122e47bdbeafa40049c1ed46ff201497c8143286

  • SHA256

    e8a27567c215ba8b4e66afc4f1d9ea3c795d0142edd10fc6976e8d762a022ad9

  • SHA512

    d8911c8a66527a46761878526a101e58243a33f35005512b13b4351cfe146972bcfc2fe0c0cbb467c36bb6b03756c6f6b584af4e7e1898729a4b3dfb66ff99c8

  • SSDEEP

    3072:07KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jb8e8hh:aKht18I0aLSDIOIylE0QXOiT4x

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2468-47-0x00000000002D0000-0x0000000000300000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections