General

  • Target

    820-146-0x0000000002480000-0x00000000024C0000-memory.dmp

  • Size

    256KB

  • MD5

    3038379efc31d3c4eb4ba7b344068d35

  • SHA1

    cc18b1332087f5599e428fd0609ebfb4e70b7513

  • SHA256

    89c62fa633a24c14f20ce44696a15d97beb35daf3caf2455515dcdb15992e9fd

  • SHA512

    121adfe2ed969a18e8fa87d7389d5101e6fa1e3aa8043c4c4161f4c678d90b89ae050de239d689b7158ea324627ad264e8e4e7ebeb7bd30e3b207bda6c695e17

  • SSDEEP

    3072:Z8e8hPqwNL9L4OudU/iXqVYkl9W/t78e8hP7:Z3aL4RVXse/t78

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 820-146-0x0000000002480000-0x00000000024C0000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections