Overview

overview

10

Static

static

10

2060-93-0x...ry.exe

windows7-x64

2060-93-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2060-93-0x00000000008D0000-0x000000000095C000-memory.dmp

  • Size

    560KB

  • MD5

    0cc4d08cc431ff203f8ecf5c5101a3e9

  • SHA1

    8d660be8b9d43510bdd9349479da9aba9e50e035

  • SHA256

    44e880115e548c9cd8806105d1954bb41aeb87943cc33fbb1774d7bf8e33b657

  • SHA512

    b3d8bce94270b3dda7d8fb9205b6597454eb051c187c84afcea5ef7618ee3b09605eb1aa8d4a482de80c2ddeddf886f9eff1ac9593f5a72f2c210848c0152061

  • SSDEEP

    12288:CoZs4BTKoTHKRyidHZlXts7/rVUZ1DV3S2LIQVw7eIO:CoZFTKomhpu3GfDV3S6IO

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2060-93-0x00000000008D0000-0x000000000095C000-memory.dmp
    .exe windows x86


    Headers

    Sections