General

  • Target

    2488-28-0x0000000000DF0000-0x000000000272C000-memory.dmp

  • Size

    4.7MB

  • MD5

    62d6bf351f60ff27fdf6cfa2f13ff1fc

  • SHA1

    a758289252481bf493cae0fdf846e9e2da445278

  • SHA256

    d8941b868c72f494673e41aa47d2e40e0143c1c1273e5b048cca08d8570c631b

  • SHA512

    3db5ecd00130c2dc4169938d2addacce41bafc28cce33b07fd58edee36a693fc2bfa07d8b9e532ff613f3eaa2f52af87c018dbccbfde45093ade11e34eb04b39

  • SSDEEP

    98304:S2ZPgjhkYrgprTjEyVzUxOnnGCwtUHLMKsN8lZ:lP0fsEkJZ

Score
10/10

Malware Config

Extracted

Family

redline

C2

65.108.20.160:11396

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2488-28-0x0000000000DF0000-0x000000000272C000-memory.dmp
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections