Overview

overview

10

Static

static

10

2912-114-0...ry.exe

windows7-x64

2912-114-0...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2912-114-0x0000000000920000-0x00000000009AC000-memory.dmp

  • Size

    560KB

  • MD5

    b00eb9e7c066dd7a57795d51a81238bc

  • SHA1

    9cce863387fd70765d13fa9fd1dd8927dc255b43

  • SHA256

    f178eb07cc09abe53c9aa0935da9bd8cb5c763378b6f638a5b024fb3aa839fa2

  • SHA512

    605f5af3bf9d7ec3af9544f9c53b9eaf78a2241753041ea42cce06651f8f1d9435878707171aa833eb4570b564a13e235f68394367bac2b3a5c52e707b44709f

  • SSDEEP

    12288:NyxIzkD3yol2ahn6XdijV5mh5CSN+myH4UQQgam54/T:NyLD3yY2aZ6dWmhUSN+m3W

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2912-114-0x0000000000920000-0x00000000009AC000-memory.dmp
    .exe windows x86


    Headers

    Sections