General

  • Target

    2440-34-0x0000000000230000-0x0000000000260000-memory.dmp

  • Size

    192KB

  • MD5

    a251389e4d36415e10610da625fdb3c6

  • SHA1

    b797d708c3dab7cc9e6bf0a63408ac94d67529d3

  • SHA256

    3525e7328d5fdd08f15bd17b6ee9fc4a24b25966eb364798b7cefede6264e6ee

  • SHA512

    a42abffab824097814df69139fe1dceb5d714f3269e8eff692f5c101bbb17c226c3b9099f3025064977fbcd9216e35b733b0cc420158c530ec04cb78c58fd3e2

  • SSDEEP

    3072:y7KhtvNxZ8I0aLS9DI0OPleKiIylE0+lKsHXOiT4Jl8e8hh:cKht18I0aLSDIOIylE0QXOiT4v

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2440-34-0x0000000000230000-0x0000000000260000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections