General

  • Target

    1648-76-0x0000000000860000-0x00000000008A0000-memory.dmp

  • Size

    256KB

  • MD5

    0e7be26b78763fd00f7b93515afc6d43

  • SHA1

    5fa38e1d4f87acada0061b766d319c668a56fc3e

  • SHA256

    5840f43d8774da05ed3088681feba0e0d3053b4b7e22966ffed28dc43178e703

  • SHA512

    34da697ab464954aa2abbc7f2ce3ba4139054d3eed6da84b4fe48d00553b722ebcb32e4464f8e7bcd2f36ef9eeefbef5071c615e5cf94686758f02fcdb41a9fe

  • SSDEEP

    3072:Z8e8hKmfXEqVMVxI/C6gXu8e8hKFYJSObYH2HaN:Z8f0bGC6gXuEJ/YH0aN

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1648-76-0x0000000000860000-0x00000000008A0000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections