General

  • Target

    2316-0-0x0000000000600000-0x0000000000650000-memory.dmp

  • Size

    320KB

  • MD5

    5284937190cb5ee191135ffe5dcd900b

  • SHA1

    dbbfe9a4cd1fcfb908838d0f0bebe9434860ee66

  • SHA256

    281f1122b373c2f7c1e1762dce83cf5cb0c3315f7d01fbc38be91b32e2495e16

  • SHA512

    9ccef8f6d3e91f6ddf70fedab73177054cccce2fd3a48904361d568993f4fffee2e07908da35fae71d8dde8583e2fed47f2477f0a8921f07874101dd32527965

  • SSDEEP

    6144:PcZqT6DI6tXH3dCN/Oqn0PUNxf8wXu9TlbuiJalQ9gDmG61LL:PcUWscm/lQgS

Score
10/10

Malware Config

Extracted

Family

redline

C2

45.15.156.127:48665

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2316-0-0x0000000000600000-0x0000000000650000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections