General

  • Target

    2388-94-0x0000000000360000-0x00000000003EC000-memory.dmp

  • Size

    560KB

  • MD5

    d05fe60a4065648724474d7e4c28662c

  • SHA1

    22b5feb6c54a655de63a08b138e2045f10458ef4

  • SHA256

    21f1ca79091e43cd2c75b333c4054eafec72d61d01e96b2dbfcfee48d5390ff2

  • SHA512

    79f85c7080a30db724abed6b9957b1da260941f56d30a7cca52873c7361ab7a87c7590b9123068d89e380ab8a6f102d1b2e605d5207c579e3f1148d0e11997b3

  • SSDEEP

    12288:h5QK6x08c+IgnotoJEu9H72lyKvHJQsv/UhmDr:hC1xg+IgnotHK72lNr

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2388-94-0x0000000000360000-0x00000000003EC000-memory.dmp
    .exe windows x86


    Headers

    Sections