Overview

overview

10

Static

static

10

2472-94-0x...ry.exe

windows7-x64

2472-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2472-94-0x0000000000250000-0x00000000002DC000-memory.dmp

  • Size

    560KB

  • MD5

    b0cdf5dd4d491a9e5ba1a479bd632e9d

  • SHA1

    b957ee7d56a1601bb995901c65ade08a7e4a62fe

  • SHA256

    23e67aa4e84cf65a12bfd6dbccc7237b9c358c30ce6bb8c8b40a5fcb8f2d758c

  • SHA512

    ed6fd4183340be2b8d8827554fcd3f647f35be25ff2f146b6b7ee77a8427599f819ac8aac918b999f43f06908ac030e472a77f9e452c53d973d716ad630c9ebb

  • SSDEEP

    12288:aWFV+nxkDlzq5kU8xgJdoU+fohfrvT3bOL2G78vVUyQlkunZBw:aWFaKs5+xrHMTvT3bOL2G7tBw

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2472-94-0x0000000000250000-0x00000000002DC000-memory.dmp
    .exe windows x86


    Headers

    Sections