General

  • Target

    1204-194-0x0000000000400000-0x0000000000440000-memory.dmp

  • Size

    256KB

  • MD5

    3b85949eaeac22dc9cb7ca0c8cea5b46

  • SHA1

    80f63bafd22aba7736f981a970939d8363fce084

  • SHA256

    7d721f91b65cfacff5f84b4a741621dee114daf398e2897fb7fa7497f73bf92f

  • SHA512

    324d510d4a0be07c8796301cf5d977efc42f716099a2293876c13950a7229effbcc0fc02a310a186fac9a0171048e9c592aa3fa8c7b9fe303b7d8b5744d1fe73

  • SSDEEP

    3072:fNKgBWrPbEunpyTN9zgaHeuGhriktrBxN3kuZ+zdzV8e8hjye7:JWrPYZ9Ie4rhTodzVl

Score
10/10

Malware Config

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1204-194-0x0000000000400000-0x0000000000440000-memory.dmp
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections