General

  • Target

    876-1-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    141ae5a4d7c654af03a3d382694ad095

  • SHA1

    700607112c5e0260508a88125a9bc764b0b1128b

  • SHA256

    3112bf1cae6a347def6dc30113576c97b10eec229986d0810ee3b33f9f7c3378

  • SHA512

    76339c19bea8702b426119e475d1e081a35bb6945bf30f75c58daf200031670f852ac67750ef5a4b43e443bdac39d2c36e2fce6bbd14fd5472c475eaa26a491e

  • SSDEEP

    3072:zcZqf7D342p/0+mALkyQWzwQ0gMs7aRSoPM2TVStk5zG31weqiOL2bBO+:zcZqf7DIOnxDt7sxHTVOkEUL

Score
10/10

Malware Config

Extracted

Family

redline

C2

194.26.232.43:20746

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 876-1-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections