General

  • Target

    1896-101-0x0000000000BF0000-0x0000000000C30000-memory.dmp

  • Size

    256KB

  • MD5

    3fa2f6b81f1ebff15b6953bb89470a23

  • SHA1

    3c1c304e4d5ecb4272e64b56fb7c1f04072fc190

  • SHA256

    2dbf2d23d107171f13d6e49ed509ffbde256a3ad12ab1f9376313edae43f827a

  • SHA512

    b06a13f8e85587bb0e80b6f85d2054894535b204aa8079767e794a725e2bacaaf93794dc30bee8d516f798430b5c6e53e06d6dcaaa5a2f3b96937926bd8f1498

  • SSDEEP

    3072:T8e8hpIHmoUUfOJD8WDEpxKvmE1xqVOM0Xa3ODL0Hf8e8hpJW:TFHmVkOLEpWLd/QODL0HfmW

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1896-101-0x0000000000BF0000-0x0000000000C30000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections