General

  • Target

    2216-37-0x00000000002C0000-0x00000000002F0000-memory.dmp

  • Size

    192KB

  • MD5

    67d5ac43b516f3eab74762f450b6b34e

  • SHA1

    8576848687a18b68a2e77567b0efb1ddb9088fdd

  • SHA256

    91a144000a914cd3336eaa6c4651a51c500e40e2020152effbed26dd04c69d3f

  • SHA512

    5ad4fa942ae69cd1c1981027860ac7a9b7debd3449864c49af3009b63eacead3810c36baab56a0256c9f71d122c072149ebc0f2756aad5f90b6622ba268b28b0

  • SSDEEP

    3072:L7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4JQ8e8hh:3Kht18I0aLSDIOIylE0QXOiT4+

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2216-37-0x00000000002C0000-0x00000000002F0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections