General

  • Target

    2788-39-0x0000000000260000-0x0000000000290000-memory.dmp

  • Size

    192KB

  • MD5

    1de07832b756763b55235d8e8150015a

  • SHA1

    a8d63125fd67539180a870fc2787b22e5de967f0

  • SHA256

    81b870d7a1ea524b671557dd41a8a4d780f04bc01342f386ba2b52ab6d0e5551

  • SHA512

    ddc536328bfb3928e21bf79967fd9d0322d218ff2a8db41c4d9474f767c2ec44f2dbf1b35615fdbd7804868e982327628c59516b8440227ad62141cb96c8c4bd

  • SSDEEP

    3072:4R4N7CPvI0YSzSQ02OEBg33G7E0swdBqSsQ5Ja8e8hj:4RdvI0YSN0g7E0B2SsQ5k

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2788-39-0x0000000000260000-0x0000000000290000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections