General

  • Target

    872-91-0x0000000004B10000-0x0000000004B50000-memory.dmp

  • Size

    256KB

  • MD5

    a22d63e505dabf6ce61ef7f13959e6f3

  • SHA1

    3c499b27a426179e6a219a6bdf021a3def9ebfb1

  • SHA256

    aee60852f70e73189a58561ccf69cb4e892ccb43c90cf94be681f367f322d944

  • SHA512

    373529dad54a9d9d73a2b87fe5ba7db915a8a94d4497282f3c17a1e8cb9b3bac802c5d4950c0ab2f87e8ccc42349716fe31ef24f7c4441c75393bd50327aee88

  • SSDEEP

    3072:Ox8e8hAS8vPgUSkUOr8T/nMxN1UpgBbH1dP1AO8e8hA:WmqnqameH1dP1AO

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 872-91-0x0000000004B10000-0x0000000004B50000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections