General

  • Target

    2704-141-0x0000000001DD0000-0x0000000001E5C000-memory.dmp

  • Size

    560KB

  • MD5

    c8a4f15b59335704ff7dbf39699ee9b5

  • SHA1

    86ee7ffc61a0ae7270a9102142db41f432b1a7ce

  • SHA256

    4b04a65c5fc5f4f2493391c303de1ab120dec19b098f2e87fda8579b471e61e1

  • SHA512

    d3b7a60d8bc70b29a56f658d5897af8a67b35807f52c86686a7812320a07692a9ef2f0d70ef9dfad05a88cdefa5ed32f52f0894045c51ba13302f2fe73bcb426

  • SSDEEP

    12288:fgUktMaF5RxHysH6bREr3/sASy8XWQeY5iFTHRQbD9Ap:f2usYKQsfugp

Score
10/10

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2704-141-0x0000000001DD0000-0x0000000001E5C000-memory.dmp
    .exe windows x86


    Headers

    Sections