Overview

overview

10

Static

static

10

272-141-0x...ry.exe

windows7-x64

1

272-141-0x...ry.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    272-141-0x00000000007F0000-0x000000000087C000-memory.dmp

  • Size

    560KB

  • MD5

    10d5cf462b5667ea54f64a223a19b299

  • SHA1

    51650f6d85fa3fbd8c86ea15d0f5117a2b5c61ff

  • SHA256

    77aec32a463dc9c62d9118d4a46b82e965f3d2e2b4d2630e911f92eceb51cb5f

  • SHA512

    401f3cb34e80524c3edaa3f012f925e3a3ea26e62e33c7724903a7944baa8e2b878458e1ce7802b6de639135a1d50b5243d8f196314537053e0a0da566f16c42

  • SSDEEP

    12288:C6b2H/Y7ItvMXTspA33JLxhi2Yn2w8Bf7AiG9QJcRF/LG:C6o/Y7ItU4AHhxhvw8Bf6G

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 272-141-0x00000000007F0000-0x000000000087C000-memory.dmp
    .exe windows x86


    Headers

    Sections