Overview

overview

10

Static

static

10

2860-94-0x...ry.exe

windows7-x64

2860-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2860-94-0x0000000000370000-0x00000000003FC000-memory.dmp

  • Size

    560KB

  • MD5

    11850074fa187ee92d924310b8e531cb

  • SHA1

    ef30e7c98a05c11f7082774a8b9e2306ae5690a6

  • SHA256

    e72292e7f23a3f2af1c8b5ff57e74e0359d1110b450fd93a2bdf231479b32fe4

  • SHA512

    3acc3ae30b93512b479cf1d4ad69d8de7ed3208a991fd4e91392873e98c9c0aa7f6dc19c305c964b8ac1ef8e3712740c18f68d30c2b586187168ad775c725486

  • SSDEEP

    12288:84InzbJ6ZEIioCsRBXyD6Fwz7CNCpCjUyPQM8N67f:8NeZCsRBX26FwzWj1f

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2860-94-0x0000000000370000-0x00000000003FC000-memory.dmp
    .exe windows x86


    Headers

    Sections