General

  • Target

    1708-56-0x0000000004890000-0x00000000048D0000-memory.dmp

  • Size

    256KB

  • MD5

    700fe3a91176675a9a828e07226e064c

  • SHA1

    38e167e2b983e56875f522361882090aa9c4b42f

  • SHA256

    02d7970e664b9f96e0a4e71e12aef5df22235d9093334784b861986f363a8c4a

  • SHA512

    8c258e4f15b460e2c2c9f88b025efb1ae464ac64222eda57ecd8532efa7ac3b8f51106125b13f31767ef45c3c0d667a814ba92fc6e088369cc3199d0d9c8bb5f

  • SSDEEP

    3072:58e8hh2zJM2xN5U9kK8AW8e8hhev/CBh+V:5pyIq8AWR/Co

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1708-56-0x0000000004890000-0x00000000048D0000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections