Overview

overview

10

Static

static

10

2856-114-0...ry.exe

windows7-x64

2856-114-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2856-114-0x0000000000320000-0x00000000003AC000-memory.dmp

  • Size

    560KB

  • MD5

    d9029313f09f84aa36c80a38d2310fb0

  • SHA1

    de174109b9ff477adf59e42122942680401b14e2

  • SHA256

    8a3daeb56e4478d5c888d77e8a4b18af8ef58a28eb0d01b88b6cfd1cc9ced2a1

  • SHA512

    ddc3d769877d952badefed8889659a28a7e79926032480bd74122b083ffb6c87d982bf9a765f7cccd60990d59b725401ebb61f04b73d3a6ee4e836b779b68155

  • SSDEEP

    12288:ONMeIYRZdBytXjvMNT4Q14hwWBQWnWVZfI:OPbRl2w4QpO

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2856-114-0x0000000000320000-0x00000000003AC000-memory.dmp
    .exe windows x86


    Headers

    Sections