General

  • Target

    2116-94-0x0000000000910000-0x000000000099C000-memory.dmp

  • Size

    560KB

  • MD5

    0907bf3df9a7dad18764e0ef4e09f8b8

  • SHA1

    b6d709f689c64c55adff9a962b69f9155df4b9b5

  • SHA256

    3dd325f13bd0ddfb10c244fd9c99fb8c8140728747fa2b4eb75d8b25c1628c52

  • SHA512

    e983dc2d503bb5684e401d93ed5bddbb2453fa3076f98755122896d724b5acd41d9216d842d55d5ccd6a0c8ab6295c4f35a8ddfe10724ab9527fed77b370e6b0

  • SSDEEP

    12288:YtrTM4ZBiLjIFLvngicq4QatNeAQG8CPP+:YK4ZBiL0FLvtctQaF+

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2116-94-0x0000000000910000-0x000000000099C000-memory.dmp
    .exe windows x86


    Headers

    Sections