Overview

overview

10

Static

static

10

2624-94-0x...ry.exe

windows7-x64

2624-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2624-94-0x00000000002D0000-0x000000000035C000-memory.dmp

  • Size

    560KB

  • MD5

    57796232b4ecbe3130a337b0dfd8f5b9

  • SHA1

    07fe7fafcf5c8f76d1284b87c4935df456829192

  • SHA256

    1197d6803bd40db6467187ab21ba8711545ac2c72f4bf1aa1cd8f7ee3bae8e46

  • SHA512

    4154cb552c7f8e35211010cdb21c6d8cd0af3508f70b9da4b0a0a9e1a3bf0e726512f3454e60ca7f400dc4a88adf470e88325c1c458fa48644b906277cfd6d64

  • SSDEEP

    12288:qNs7ShQqhTIX2MuQm6gcu8WZKCrWUb7gHeKQWvdF6ml:qN+qdIXJXVAjKCrWUYmC

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2624-94-0x00000000002D0000-0x000000000035C000-memory.dmp
    .exe windows x86


    Headers

    Sections