General

  • Target

    1276-76-0x0000000000600000-0x0000000000640000-memory.dmp

  • Size

    256KB

  • MD5

    fcf14bb8aafabacacbda9a9621806c57

  • SHA1

    2e718e72b8dab1429910a510d00d11b5054e9e17

  • SHA256

    04335ac6764106ea6b2f635a422acc4052e6a6beaf4145fbda3af21d4e752210

  • SHA512

    305a86faa18c25eae68cdd2927cef88c957db9542db63069ccb3abc9eaf241175e4c68c4a7f9dc380bb6b39b6960e5ef45c756cc925b9b3447f6ed6efca23e33

  • SSDEEP

    3072:Z8e8hKmfXEqVMVxI/C6gXU8e8hK0DEObYH2HaN:Z8f0bGC6gXUyBYH0aN

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1276-76-0x0000000000600000-0x0000000000640000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections