Overview

overview

10

Static

static

10

2448-94-0x...ry.exe

windows7-x64

2448-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2448-94-0x0000000000A20000-0x0000000000AAC000-memory.dmp

  • Size

    560KB

  • MD5

    4003b52de93b0896d0f34039e14008dc

  • SHA1

    aeeac00a5ea98be7a0edf71288e016fb73668007

  • SHA256

    a5206668fddadcf5aec48acfc752c3894dade02ddf35ff11a3ac1babae8cd512

  • SHA512

    481a4f39ae109ef62d4918272f9940c7c2024db306c1c1ea41ad5d451b9b9dfad81e9ef28864016fc40022a24f305ee998a1cf2caf4f6da9d4ae5e1925808373

  • SSDEEP

    12288:pKiZZDLe56GN2TPA1GQy6mS+nQV/bKAen7z:phZDC56GNkPA1GQB1Vs

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2448-94-0x0000000000A20000-0x0000000000AAC000-memory.dmp
    .exe windows x86


    Headers

    Sections