General

  • Target

    2908-141-0x0000000000850000-0x00000000008DC000-memory.dmp

  • Size

    560KB

  • MD5

    ece84dd046acd10288a2991df90fc53d

  • SHA1

    03d9a9cdcf4f98f60c8c28f3fb5692c513b1a42a

  • SHA256

    4aa3e189e0e3994bbc603bb4680fee3c1eddd7c92cab9264931679b4d789e4c8

  • SHA512

    cce8e4299fb69cf356e05bf78d88f90395041c06388187b8876f2b7ba69cc51df856a14c91bf329d72e2f287723dc456abe72b2e2ef316018cb639f2733352f7

  • SSDEEP

    12288:V+EUqxavSLdZng89jRVTtAssly0gsQ9k4Qz0/lcXzU:VblaqrnBVTwly0LQtF

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2908-141-0x0000000000850000-0x00000000008DC000-memory.dmp
    .exe windows x86


    Headers

    Sections