General

  • Target

    1064-222-0x0000000004930000-0x0000000004970000-memory.dmp

  • Size

    256KB

  • MD5

    b4bf377df41d828b7b4bd38b3878d2c5

  • SHA1

    b2be1354c102e2059d091bb077901986b315243e

  • SHA256

    d6c8aa2ab2d02e86b293e54c86883f3d0b8204b8e594a25fe86a00ba4517621b

  • SHA512

    56e43eb2e99bbd3e601d3d3f08d9a5e80ce9473a7873614ae295b05d340ba35ef307e16a1f443132bb1a99e2bddd502f9bb35f3d5bf19af157b9b2eace62df55

  • SSDEEP

    3072:cEcZZoKjtxAOYEH9Cr1Bk2fPJwJEcZZoKjtxAOYEHcUcYgad:cEcZ6K9qBLfBUEcZ6K9Vb

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1064-222-0x0000000004930000-0x0000000004970000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections