General

  • Target

    2348-55-0x00000000000C0000-0x00000000000E6000-memory.dmp

  • Size

    152KB

  • MD5

    2569c813405933f4141b0104ad87b680

  • SHA1

    4228eb01552f5cca1a9b6247404ecf4e171121b5

  • SHA256

    33b49930effcab9001003be2284ed690da0a4ef21865532a3638da3a81664264

  • SHA512

    cc46c0c161dd077ba33c16b30ecbc5964eb0e738484e14f5b1799217589359cc4c87c69af81309a058b123960e36b932f19f1088119441320f5f4771d03294a2

  • SSDEEP

    1536:EaUcnVHT1+/o8I52C+fblua1RlarzhcjvEbV7jUODdSsYgibfbFDKsRn:xUcZZZajlu2iJAcp5RYgafJln

Score
10/10

Malware Config

Extracted

Family

redline

C2

94.142.138.147:23000

Attributes
  • auth_value

    dda1939626e5e243cc1d6186b649df7b

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2348-55-0x00000000000C0000-0x00000000000E6000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections