General

  • Target

    1704-2-0x0000000000400000-0x000000000044C000-memory.dmp

  • Size

    304KB

  • MD5

    6713576f006032f93e9557a0e804f6ec

  • SHA1

    bc4d41b1534f0b805102d9a194660b8e0956e530

  • SHA256

    c1c6955807cde7e082d327f46be853fee7d7e5655420f4578add7cff326911fa

  • SHA512

    b66f38b68b7d4960bc934fa0892ee100b79b36de6e58bf86f43c493a04b86cc8c799b36c11b4b8cd7d3c3e7d4ab7cc9b13622a485f13ad6ced72cf0cee182827

  • SSDEEP

    3072:GyvUOR1yO3Emyn4NgcHbTfb3UgH+5Kcyt/qDoThyiOnqWCLdkxv5T4:EObE/4NgcHbrYge5Kj/FThyDnLCL

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1704-2-0x0000000000400000-0x000000000044C000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections