General

  • Target

    1792-56-0x00000000043D0000-0x0000000004410000-memory.dmp

  • Size

    256KB

  • MD5

    470973efc2f446c819aaa55f54f3bba2

  • SHA1

    28387d265436e9fc31a8d01d9c522f2729e52634

  • SHA256

    f57c6c806ca20f7bd61624a7f3ba75dba26e0b07a763e45a18aabf2674d31028

  • SHA512

    342c53fd54b032df9a88b71e6936fb38c0f209ed1d09fbfc3bbb145578c653a6404f6c1849da7d7a76e0d1903a7e80544ac2125e9179669ad5038af8ed334942

  • SSDEEP

    3072:K8e8h1m+dbr7ZKO7jYxNEaOr369Jh7bTuxtK8e8h1eJhn3vIf:K1+tZvPnFjOJh7bTuxtK9vM

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1792-56-0x00000000043D0000-0x0000000004410000-memory.dmp
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections