Overview

overview

10

Static

static

10

2216-93-0x...ry.exe

windows7-x64

2216-93-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2216-93-0x0000000000320000-0x00000000003AC000-memory.dmp

  • Size

    560KB

  • MD5

    4e54c1d231bc637324583bcbc1b5bb11

  • SHA1

    2588549879eb7d924f2fdc368ba56c0b7477bc56

  • SHA256

    a1f0db335a02002caf3c0db30d25ac991c616d31b27f95b4a436965ce50782dc

  • SHA512

    a846a35f5d02a7305b53398f0bffadcfffcb545fb3b80796a7013b908445d137dfe78d2954c2161c25e8f11e6ec9400bbcd2540f820bcd6ee21711ab4f06227a

  • SSDEEP

    12288:9FHcv4S0MgHoWOApCx1mQBq55Z9kIxQzzv3Imv:9FHg4MgIWu3B25Qv

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2216-93-0x0000000000320000-0x00000000003AC000-memory.dmp
    .exe windows x86


    Headers

    Sections