General

  • Target

    2380-1-0x00000000002D0000-0x000000000030C000-memory.dmp

  • Size

    240KB

  • MD5

    932d1e5196c936b501a9dc988b910105

  • SHA1

    dfa0d06a8fe1f534fb4496348c58e6cd3a42072b

  • SHA256

    e0290dabe91df49416d5aca90a2b24f19f8feb76acbd489ce4a7252b7e88d3eb

  • SHA512

    7214bbfbdd5904c84d4f6300ad947b03798daf143e29a8686467e2255cfa06b800fcf53bef2514cece0bc9755071ac0e28eb88da358f6baf4caa3e6461b8c012

  • SSDEEP

    3072:6zdHb8nXp7YNgcW14vfrwOrxw8MdDdgoRSdZ51SywXhelKSt:ub8Xp7YNgcQkrwOrex0H51S/Re4

Score
10/10

Malware Config

Extracted

Family

redline

C2

45.15.156.142:33597

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2380-1-0x00000000002D0000-0x000000000030C000-memory.dmp
    .exe windows:4 windows x86


    Headers

    Sections