General

  • Target

    1520-101-0x0000000000D00000-0x0000000000D40000-memory.dmp

  • Size

    256KB

  • MD5

    a56740dfb17356624a59e635d9c4c4b6

  • SHA1

    3c760bcee83ba4190255531957e0c3f67236e647

  • SHA256

    8a37a5252f66ddb170d4e24c51163f26ebaab4b6f341e900fd20d79ad4fcbf4c

  • SHA512

    fd31261baf3c46169684feabc65cbfef7d02bf0c627f465583fe01f9355449a06d5d2023fe6764c74bb07120b0a862ed314850d9f0e9057e90c8bdb3c00c3b2c

  • SSDEEP

    3072:RVVKve8WCXYFlqVsg4/ywuHx8nR8e8hE7YR:RVV+rX0DZFuHx8nRL8

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1520-101-0x0000000000D00000-0x0000000000D40000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections