General

  • Target

    2272-94-0x0000000000260000-0x00000000002EC000-memory.dmp

  • Size

    560KB

  • MD5

    182a4e92f74d659f9971b89a70ce63b5

  • SHA1

    8db0ae0e42a9c337307215f588f09d4412a9838d

  • SHA256

    3d05e553b78d994b3cb778396dd667e5beb1d6a4404cab5cd435561dd51082b6

  • SHA512

    c8e0c3114c3b3ed3e5595630b6c273493f48399e2be3291c90e62c4a995a701894aa86cac000c020f2089fc5e44d9df754578317868bc4da6b57fc0d698d090d

  • SSDEEP

    12288:iX83GqHq1FlTekyw7W5OedMtbbm6VH2arpbs9CbjQDz5Z/lw:iX8Pq1FlRR7U+phiS

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2272-94-0x0000000000260000-0x00000000002EC000-memory.dmp
    .exe windows x86


    Headers

    Sections