General

  • Target

    2024-56-0x0000000000090000-0x00000000000BE000-memory.dmp

  • Size

    184KB

  • MD5

    53e1778140f5ba6e04d253b51aa9070f

  • SHA1

    351bad81221da933633c1fd23281ddea3bce1961

  • SHA256

    f1a9f8c22339805dad0b08c5dea142ddd79470292be0a20cbfd72ee823d9c014

  • SHA512

    8847761edc5b32744f763953a322e2f907603394320f4a846061a0fd8373d136fd5515b70e2ee2972d027ae9eb20d5a9051db4476d842e2304ed74d25932b508

  • SSDEEP

    1536:r/zVvzuu6qlVZRGWPlpZrZYpmBORJFniIMTGqVAbuu8ZBroDYs+xZ83wYkl8e8hg:r/5zpfLRBGLqVQWLroDYs+xZP8e8hg

Score
10/10

Malware Config

Extracted

Family

redline

C2

45.15.157.67:37535

Attributes
  • auth_value

    9b8642e33a0f57afddf2d90caee6fcd9

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-56-0x0000000000090000-0x00000000000BE000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections