General

  • Target

    2776-40-0x00000000001C0000-0x00000000001F0000-memory.dmp

  • Size

    192KB

  • MD5

    4e5566ca0f540206de15c29d4d4675df

  • SHA1

    783fc8936ad06d4bba608f28117d843260f07d11

  • SHA256

    6ec5c7ffafadd9d9b690cbd67715365ba979cf341ced1c870849b16cb711e9b2

  • SHA512

    23f3ca47319b85739e33cbb468470f5f533e958245098c63695602ebbbcee202a113e3975dd8db7bdc7d6fcbbd3f6d433635720d92867af291307759b86c8f72

  • SSDEEP

    3072:xR4N7CPvI0YSzSQ02OEBg33G7E0swdBqSsQ5J08e8hj:xRdvI0YSN0g7E0B2SsQ5q

Score
10/10

Malware Config

Extracted

Family

redline

C2

38.181.25.43:3325

Attributes
  • auth_value

    082cde17c5630749ecb0376734fe99c9

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2776-40-0x00000000001C0000-0x00000000001F0000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections