Overview

overview

10

Static

static

10

888-114-0x...ry.exe

windows7-x64

888-114-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    888-114-0x00000000004E0000-0x000000000056C000-memory.dmp

  • Size

    560KB

  • MD5

    e5ecacfba0e631a1097d6c1ac9d148ec

  • SHA1

    7019be9b97c4e8675949fbf1ce7b5b1093df51f0

  • SHA256

    e72413313cd67e713267c98f572a7aa894f64a1f675979203c5a7c086b85f377

  • SHA512

    c3123212e376f6a87b93ca8221d2383058c239cbb145ccc0f0b7347a0e07277442d3c129d7b6b91f4bb9743f74e128f016a75d5baecb3e7e9a7ed604aba1ac00

  • SSDEEP

    12288:awF3Lknu2xyWyf1cqCKr5xBKsIeQF3SPBJ:a4LrdCKr53J

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 888-114-0x00000000004E0000-0x000000000056C000-memory.dmp
    .exe windows x86


    Headers

    Sections