General

  • Target

    884-4-0x0000000000400000-0x0000000000452000-memory.dmp

  • Size

    328KB

  • MD5

    e1e1d131ad537be3b196b82d8854e264

  • SHA1

    d4385d3b503127b597321b0683ab427e609e6359

  • SHA256

    32211d0b0d80af969ea3712c40b0f71c158991f119ffed22e826a14d7cdfa94c

  • SHA512

    96c8313be10ebdc1c313fc1048b6460980f511d13903f43b33046aad20db4c24295684e2e00776f3453dad02bc533a7d862d37ce3903a3eed350099a14e06a40

  • SSDEEP

    3072:QcZqf7D34sp/0+mAzkygIQQUgWFo5DqLW1NRTVqtkTb33xEeqiOL2bBOW:QcZqf7DIUndjWo5I07TV2kn4L

Score
10/10

Malware Config

Extracted

Family

redline

C2

185.196.9.26:6302

Signatures

  • RedLine payload 1 IoCs
  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 884-4-0x0000000000400000-0x0000000000452000-memory.dmp
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections