General

  • Target

    2840-113-0x0000000000E40000-0x0000000000E92000-memory.dmp

  • Size

    328KB

  • MD5

    907f48685c5ab9ac6ad2a338ae30950f

  • SHA1

    23cb676f6141bdbf09de325e64cb7eedee9e5bb2

  • SHA256

    eda6a9dd9cbc262ff1fbabf00fd7090160151dd7ab89780f07052ec74110a533

  • SHA512

    95a8e6f6dd43e5ccbbacde04a82a931c6bf1cfa0adb3d356271a542ce804b0c64e0f076d0bd2fce7b9cda2604ede718dd2b316392421c90336932c08d23582fd

  • SSDEEP

    3072:+q6EgY6iOrUjZxA0wPE9tHpZQgeHTAetVSKPyccZqf7D34teqiOLibBON:lqY6ipwPuHp+geHTAqV9yccZqf7DIXL

Score
10/10

Malware Config

Extracted

Family

redline

C2

185.215.113.67:21405

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2840-113-0x0000000000E40000-0x0000000000E92000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections