Overview

overview

10

Static

static

10

2956-94-0x...ry.exe

windows7-x64

2956-94-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2956-94-0x00000000008B0000-0x000000000093C000-memory.dmp

  • Size

    560KB

  • MD5

    b86df2a626b721598f779dbd8f5208b6

  • SHA1

    8717b4b685ef71e90853dc441cef678d8983b7b5

  • SHA256

    43b1f138c0626b1cbd6de6b0cde05c2b39bd182d47dd0aac39aacb0abd7b66f2

  • SHA512

    26cb5f56989d7eb6f1d966e56b2f1654dc71ed19b539f6d2b9453af010522f0c8c86faeac2669d0806710e3ca5da6b58f736f1793202973096822949271f9ace

  • SSDEEP

    12288:NYMva4Zh8y2Y8CzGz3FapI4btRSMn4AxFqKDS6jwxyquPXQcu/ED2:NxPv8EJSz3Fz4txFqhMD2

Score
10/10
lampredline

Malware Config

Extracted

Family

redline

Botnet

lamp

C2

77.91.68.56:19071

Attributes
  • auth_value

    ee1df63bcdbe3de70f52810d94eaff7d

Signatures

  • Redline family
    redline
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2956-94-0x00000000008B0000-0x000000000093C000-memory.dmp
    .exe windows x86


    Headers

    Sections