Overview

overview

10

Static

static

10

2944-114-0...ry.exe

windows7-x64

2944-114-0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2944-114-0x0000000000300000-0x000000000038C000-memory.dmp

  • Size

    560KB

  • MD5

    26485479bae28160dd068cbdc8e7f374

  • SHA1

    f4b30d59e47d673857267a91de7d74d649cb6cc1

  • SHA256

    0a74f2598fb67690798a6073b09047c2d94c0e8d1844ab2176344e9c8d3f4afa

  • SHA512

    08ca4a9a75d160b8707854a9935c44cccd0ca55fe538314ace60683039b4d5d951aed3a1b0df11bfea892cf9fdf3a3edf3034588c1214c61d45b952d0d3747b3

  • SSDEEP

    12288:4Lr9HJc3ZLZrjQRblecSNU1GOlRV7dvNvjHyT9NdQ8pCRX:4L5HK3hZrjSbUjU9VdvNvjSeX

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2944-114-0x0000000000300000-0x000000000038C000-memory.dmp
    .exe windows x86


    Headers

    Sections