General

  • Target

    4516-23-0x0000000000690000-0x00000000006C0000-memory.dmp

  • Size

    192KB

  • MD5

    01dffd4dd8e04beac160a7a1ee6ee9d6

  • SHA1

    ec40618d04d1195dbf962dd38b3bbef1c6497079

  • SHA256

    2351e869aefec6465676d8101786d75801987a43dc95efa0ab5ea0edaac5fdf9

  • SHA512

    93818df196c70716b64e6bea5a95c9b1744c00a8aa242c706100731c3aadbd7d4cba0462d52f6773b5f4ffb599251e59cd94e1a42ffbb156d679aedcb017f9e5

  • SSDEEP

    3072:2R4N7CPvI0YSzSQ02OEBg33G7E0swdBqSsQ5Jj8e8hj:2RdvI0YSN0g7E0B2SsQ5x

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4516-23-0x0000000000690000-0x00000000006C0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections