Overview

overview

10

Static

static

10

1488-94-0x...ry.exe

windows7-x64

1488-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1488-94-0x0000000000480000-0x000000000050C000-memory.dmp

  • Size

    560KB

  • MD5

    e15830fb447954d3ea5e7fcb31d397af

  • SHA1

    5654815e4d7a173683b9f6f0a8b922ca4ae53e23

  • SHA256

    1061647f332f79cdc552cfe1d4bd7f8a9d3ac38f0a085cf0c0768b9d4232a5ed

  • SHA512

    012ced341179f212bfaa9d8cc868e8e6ba15fc06bf993ae6c054cf03d967367898e73c18013b9fd94167a1dfe634f3157c0cf16369f6f4ad6dda3ed6dccd78c1

  • SSDEEP

    12288:ZqT8Obb2Bs9ZPUsSOKau6izxFdu8qHAcpVVTsdwQfr1QJX/8u:Z8Fb261Ud1PdOAcpzTi9u

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1488-94-0x0000000000480000-0x000000000050C000-memory.dmp
    .exe windows x86


    Headers

    Sections