General

  • Target

    2756-93-0x0000000001D10000-0x0000000001D9C000-memory.dmp

  • Size

    560KB

  • MD5

    2d13ea8afad8c81f4b2cf74c0ba21061

  • SHA1

    1b4eeadd1984c6ba87145ceda678acf439969120

  • SHA256

    0ff82fa9679e882572ae540d06f6f7775c2d6dbef3a8b1f27b45d85aadf9a083

  • SHA512

    6412beed82fea06c71a369ac97b35d7b4c355708b99c985f4559af68b91b273363fb4233a6deb16eac6fc754afba95b88150a6652edd5e1e2d738d1c7168661e

  • SSDEEP

    12288:LiOsDVtNsJRUDQ49THHgPYYvQIasaVenQkY/iG:LpsDVo07UPvvQI3G

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2756-93-0x0000000001D10000-0x0000000001D9C000-memory.dmp
    .exe windows x86


    Headers

    Sections