General

  • Target

    2776-36-0x00000000001C0000-0x00000000001F0000-memory.dmp

  • Size

    192KB

  • MD5

    8d5ad4508822526a013b97a45cb988eb

  • SHA1

    d7582ece8e497869fdbac3337a14ac21189a3306

  • SHA256

    fbe5e0ed40f4e0f7f64c9c23024f7ef71cb8c4f95f5e71ead021db1e00c72232

  • SHA512

    05811b1636e27f8eb4b7408f8e2af6b8d4debb361d805a27730787f00a3db7125036a1882144ac1d1083b100d0302116f733aae63955fa86123b92587aecc3d7

  • SSDEEP

    3072:Z7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4JA8e8hh:BKht18I0aLSDIOIylE0QXOiT4O

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2776-36-0x00000000001C0000-0x00000000001F0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections