General

  • Target

    1272-126-0x00000000002C0000-0x0000000000300000-memory.dmp

  • Size

    256KB

  • MD5

    5d6dd1ac6c2a18a68fa3d77d0dc893dc

  • SHA1

    d4f5d2ea6a3b79defbd3057ec83fa1fcf57f1b46

  • SHA256

    d18573b86d1eabe600cad3f5776359cfbcf7265be355ad0346fa94d013a7b7de

  • SHA512

    5d6141a57cf97c700ff30563cae168c4d6c8366fef5ce2ef9d6f671b49271949f769ef88cd81e85f0be1070aaacd46fa9b08aae50ed8703883ca75a954bc3c97

  • SSDEEP

    3072:XJKOMaaT7QMNzr4xNqq3M+Lr7N5L8e8hH:5RisMxxkRr7N5L

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1272-126-0x00000000002C0000-0x0000000000300000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections