Overview

overview

10

Static

static

10

2920-94-0x...ry.exe

windows7-x64

2920-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2920-94-0x0000000000320000-0x00000000003AC000-memory.dmp

  • Size

    560KB

  • MD5

    5c12abe591c0dfba8ef53d766bb5d774

  • SHA1

    cdc83dd881e0afe2a2c3039c1e51c172bd9a023c

  • SHA256

    6e39b7907cafc6ab27f94e2b68efc30b90b0a7f29ac1d141535a59012b858df7

  • SHA512

    47e5cd32bfdf2a1b9bdc951e608755874950504df12de43a91a13d751e82fd5118bacccb52ee7a94f17e6e358dc0116941f96c449aa20e5aaf8f329f38500368

  • SSDEEP

    12288:CYICounw4cEMbuZQkIgX9LDRPtiiQ/iz4IC:CYAuw9aeM9LtlC

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2920-94-0x0000000000320000-0x00000000003AC000-memory.dmp
    .exe windows x86


    Headers

    Sections